CVE-2022-35198: Contract Management System Project Contract Managment System

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Contract Management System v2.0 contains a weak default password which gives attackers to access database connection information.

Affected products

• Contract Management System Project Contract Managment System: version 2.0 only

Published 2022-08-18. Last modified 2026-06-17.