Civilian Board of Contract Appeals vulnerabilities
We track 2 vulnerabilities in Civilian Board of Contract Appeals products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 18, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Civilian Board of Contract Appeals vulnerabilities
- 8.8 High severity
Electronic Protest Docketing System (EPDS): Client-Side Enforcement of Server-Side Security
The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) trusts client-provided values for the 'epds_role_id' parameter without verification, allo
- 9.8 Critical severity
Electronic Protest Docketing System (EPDS): Missing Authentication for Critical Functionality
The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) does not authenticate password change requests to the '/update-profile/N' API endpoint. A