Newgensoft Omnidocs — known CVE vulnerabilities

Every CVE whose affected-product data names Newgensoft Omnidocs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2025-65742 — CVSS 8.2 (high): An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to obtain sensitive…
• CVE-2010-0701 — CVSS 7.5 (high): SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute arbitrary SQL…
• CVE-2011-3645 — CVSS 7.5 (high): Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to…