CVE-2019-20154: Determine Contract Lifecycle Management

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. A cross-site scripting (XSS) vulnerability in multiple getchart.jsp parameters allows remote attackers to inject arbitrary web script or HTML.

Affected products

• Determine Contract Lifecycle Management: version 5.4 only

Published 2020-01-05. Last modified 2026-06-17.