Advisories · Technology
Civilian Board of Contract Appeals Electronic Docketing System (EDS).
Every CVE that names Civilian Board of Contract Appeals Electronic Docketing System (EDS) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
U.S. GAO EPDS and CBCA EDS network access control bypass
- Government Accountability Office Electronic Protest Docketing System (EPDS)
- Civilian Board of Contract Appeals Electronic Docketing System (EDS)
- CWE-940
- CVSS 6.9 Medium
U.S. GAO EPDS and CBCA EDS user information disclosure
- Government Accountability Office Electronic Protest Docketing System (EPDS)
- Civilian Board of Contract Appeals Electronic Docketing System (EDS)
- Broken access control
- CVSS 8.7 High
U.S. GAO EPDS and CBCA EDS client-based privilege escalation
- Government Accountability Office Electronic Protest Docketing System (EPDS)
- Civilian Board of Contract Appeals Electronic Docketing System (EDS)
- CWE-602
- CVSS 9.3 CriticalCritical · CVSS 9+
U.S. GAO EPDS and CBCA EDS unauthenticated password change
- Government Accountability Office Electronic Protest Docketing System (EPDS)
- Civilian Board of Contract Appeals Electronic Docketing System (EDS)
- Authentication bypass