Coupa Total Spend Management Platform vulnerabilities

2 known vulnerabilities in Coupa Total Spend Management Platform from Coupa. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Coupa Total Spend Management Platform: Improper Neutralization of Formula Elements in a CSV File

  CVE-2026-111038Nov 4, 2026Coupa

  CSV formula injection vulnerability in the export functionality of the Coupa Supplier Portal SaaS platform. The vulnerability arises because certain user-controlled data, such as event names or templates within the Tenders module, are not properly validated or

• 8.4 High severity

  Coupa Total Spend Management Platform: Server-Side Request Forgery

  CVE-2026-111036Nov 4, 2026Coupa

  Server-side request forgery (SSRF) vulnerability in the Coupa Supplier Portal SaaS platform, specifically in the document conversion functionality available in the ‘Contracts > Templates’ section. The vulnerability is due to insufficient validation of referenc