Filtered by vendor Newgensoft Subscriptions
Filtered by product Egov Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-35737 1 Newgensoft 1 Egov 2024-08-04 7.5 High
In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information by manipulating the unvalidated UserIndex parameter, aka Insecure Direct Object Reference.