Vendors / OPEXUS Records 21 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 3
Exploited now OPEXUS records in CISA KEV No OPEXUS vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 65
OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by an administrator.
CVSS 4.0 HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00316 · Published 2026-01-08 · Fixed in 11.14.1.0 CWE-863
Priority LOW 22
OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment in the "Estimated Staff Hours" field.
CVSS 4.0 MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00236 · Published 2026-01-08 · Fixed in 11.14.2.0 CWE-79
Priority LOW 22
OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the "A or SIC Number" field within the Project Setup functionality.
CVSS 4.0 MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00236 · Published 2026-01-08 · Fixed in 11.14.2.0 CWE-79
Priority LOW 22
OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality.
CVSS 4.0 MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00236 · Published 2026-01-08 · Fixed in 11.14.1.0 CWE-79
Open these records in search → All records by CVSS severity
4 3 14 0 0
THREATIST.IORead the docs