Beims Contractorweb.net
2 CVEs affecting Beims Contractorweb.net. Latest disclosed: 2018-01-15. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-5328 | Critical | 9.8 | 2018-01-15 | ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an attacker can misuse th… |
CVE-2018-5329 | High | 8.8 | 2018-01-15 | ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) on /CWEBNET/* authenticated pages. A successful CSRF attack can forc… |