CVE-2011-3645

no score yetEPSS 2.6%

Newgen OmniDocs allows remote attackers to bypass intended access restrictions via (1) a modified FolderRights parameter to doccab/doclist.jsp, which leads to arbitrary permission changes; or (2) a modified UserIndex parameter to doccab/userprofile/editprofile.jsp, which selects the settings page of an arbitrary user.

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2011-09-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

newgensoft:omnidocs

References

http://seclists.org/fulldisclosure/2011/Sep/283
http://securityreason.com/securityalert/8394
http://www.exploit-db.com/exploits/17897
http://seclists.org/fulldisclosure/2011/Sep/283
http://securityreason.com/securityalert/8394

Check your stack JSON