Beims Contractorweb.net — known CVE vulnerabilities

Every CVE whose affected-product data names Beims Contractorweb.net, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-5328 — CVSS 9.8 (critical): ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an…
• CVE-2018-5329 — CVSS 8.8 (high): ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) on /CWEBNET/* authenticated pages. A successful…