Search vulnerabilities

Results 3

CVE-2026-82969

Stored XSS in BİMSER's eBA Plus

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Stored XSS. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
CVE-2026-85134

Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus

Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
CVE-2026-82915

Path Traversal in Bimser Solution Software's eBA Plus

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed