Read the docs

OPEXUS

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

OPEXUS records in CISA KEV

No OPEXUS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ecase Ecomplaint 6 records HIGH Foiaxpress 5 records MEDIUM Foiaxpress Public Access Link 5 records HIGH Ecase Audit 4 records HIGH Ecase Portal 1 record MEDIUM

Records

1 record in Ecase Portal · all components

TI-2026-17844 CVE-2026-22234 · GHSA-rw5g-57c7-74m2

OPEXUS eCasePortal unauthenticated IDOR

Priority MEDIUM 48

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00408 Published 2026-01-08 Fixed in 9.0.45.0 CWE-639
Open these records in search →