CVE-2018-5328: Beims Contractorweb.net

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authenticating the user; an attacker can misuse these functionalities to perform unauthorized actions, as demonstrated by Edit User Details.

Affected products

• Beims Contractorweb.net: version 5.18.0.0 only

Published 2018-01-15. Last modified 2026-06-17.