CVE-2020-35737: Newgensoft Egov

High severity, CVSS 7.5. EPSS: 10.4% chance of exploitation in the next 30 days.

In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information by manipulating the unvalidated UserIndex parameter, aka Insecure Direct Object Reference.

Affected products

• Newgensoft Egov: version 12.0 only

Published 2020-12-30. Last modified 2026-06-17.