Electronic Protest Docketing System (EPDS) vulnerabilities

2 known vulnerabilities in Electronic Protest Docketing System (EPDS) from Government Accountability Office. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Electronic Protest Docketing System (EPDS): Client-Side Enforcement of Server-Side Security

  CVE-2026-54104Jun 18, 2026Government Accountability Office

  The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) trusts client-provided values for the 'epds_role_id' parameter without verification, allo

• 9.8 Critical severity

  Electronic Protest Docketing System (EPDS): Missing Authentication for Critical Functionality

  CVE-2026-54103Jun 18, 2026Government Accountability Office

  The U.S. Government Accountability Office (GAO) Electronic Protest Docketing System (EPDS) and Civilian Board of Contract Appeals (CBCA) Electronic Docketing System (EDS) does not authenticate password change requests to the '/update-profile/N' API endpoint. A