CVE-2025-67634 | CISA Software Acquisition Guide Tool prior 2025-12-11 JSON File Parser cross site scripting

A vulnerability was found in CISA Software Acquisition Guide Tool. It has been rated as problematic. This impacts an unknown function of the component JSON File Parser. This manipulation causes cross site scripting.

This vulnerability is handled as CVE-2025-67634. It is possible to launch the attack on the local host. There is not any exploit available.

This product is a managed service. It is not possible for users to maintain vulnerability countermeasures themselves. Upgrading the affected component is advised.