Skip to content
Noroxi

newgensoft records

6 published records for vendor newgensoft.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 25
  4. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2020-35737
    33Monitor

    In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information by manipulating the

    HighCVSS 7.5Proof of conceptEPSS 10%

    newgensoft · egovDec 30, 2020

  • CVE-2025-65742
    32Monitor

    An unauthenticated Broken Function Level Authorization (BFLA) vulnerability in Newgen OmniDocs v11.0 allows attackers to obtain sensitive in

    HighCVSS 8.2Proof of conceptEPSS 0%

    newgensoft · omnidocsDec 15, 2025

  • CVE-2011-3645
    31Monitor

    Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.j

    HighCVSS 7.5Proof of conceptEPSS 2%

    newgensoft · omnidocsSep 27, 2011

  • CVE-2018-17791
    31Monitor

    Newgen OmniFlow Intelligent Business Process Suite (iBPS) 7.0 has an "improper server side validation" vulnerability where client-side valid

    HighCVSS 7.5No exploitEPSS 1%

    newgensoft · omniflow intelligent business process suiteAug 21, 2019

  • CVE-2010-0701
    30Monitor

    SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute arbitrary SQL commands

    HighCVSS 7.5Proof of conceptEPSS 1%

    newgensoft · omnidocsFeb 23, 2010

  • CVE-2025-69908
    30Monitor

    An unauthenticated information disclosure vulnerability in Newgen OmniApp allows attackers to enumerate valid privileged usernames via a pub

    HighCVSS 7.5No exploitEPSS 0%

    newgensoft · omniappJan 23, 2026