Epicor vulnerabilities
We track 1 vulnerability in Epicor products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2025.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Epicor vulnerabilities
- 9.8 Critical severity
Human Capital Management: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in Epicor HCM 2021 1.9, with patches available: 5.16.0.1033/HCM2022, 5.17.0.1146/HCM2023, and 5.18.0.573/HCM2024. The injection is specifically in the filter parameter of the JsonFetcher.svc endpoint. An attacker can exploi