Government Accountability Office vulnerabilities
We track 2 vulnerabilities in Government Accountability Office products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 18, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Government Accountability Office vulnerabilities
- 8.8 High severity
Electronic Protest Docketing System (EPDS): Client-Side Enforcement of Server-Side Security
The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) trusts client-provided values for the 'epds_role_id' parameter without verification, allo
- 9.8 Critical severity
Electronic Protest Docketing System (EPDS): Missing Authentication for Critical Functionality
The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) does not authenticate password change requests to the '/update-profile/N' API endpoint. A