Webcon Webcon Bps
2 CVEs affecting Webcon Webcon Bps. Latest disclosed: 2026-09-23. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-92419 | | 2026-09-23 | WEBCON BPS is vulnerable to Insecure Direct Object Reference (IDOR) in the /api/vacations/{path} endpoint. The selectedPeople parameter in the Gantt vacation c… | |
CVE-2026-1630 | | 2026-05-14 | WEBCON BPS is vulnerable to Reflected XSS via one of parameters used by "/openinmobileapp" endpoint. An attacker can send a specially crafted URL that, when op… |