Vulnerabilities

TI-2025-40433 CVE-2025-65742 · GHSA-m355-3mqc-x5qx

An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen…

MEDIUM 41

An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to obtain sensitive information and execute a full account takeover via a crafted API request.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00298 Published 2025-12-15 No fix listed CWE-862

TI-2011-03215 CVE-2011-3645 · GHSA-rjf6-hfqr-mx5v

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a…

LOW 38

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex par…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02618 Published 2011-09-27 No fix listed CWE-264

TI-2010-00669 CVE-2010-0701 · GHSA-7crj-j86f-65vw

SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows…

LOW 35

SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2010-02-23 No fix listed CWE-89

Vulnerabilities

Filters

An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen…

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a…

SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows…