Read the docs

OPEXUS

Records21All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

OPEXUS records in CISA KEV

No OPEXUS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ecase Ecomplaint 6 records HIGH Foiaxpress 5 records MEDIUM Foiaxpress Public Access Link 5 records HIGH Ecase Audit 4 records HIGH Ecase Portal 1 record MEDIUM

Records

5 records in Foiaxpress · all components

TI-2025-38322 CVE-2025-61999 · GHSA-jqf6-37m4-hq4m

OPEXUS FOIAXpress stored XSS via logo image

Priority LOW 22

OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to upload JavaScript or other content embedded in an SVG image used as a logo.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00241 Published 2025-10-07 Fixed in 11.13.3.0 CWE-79
TI-2025-38321 CVE-2025-61998 · GHSA-7349-vxjx-69mh

OPEXUS FOIAXpress stored XSS via Hyperlink Manager

Priority LOW 22

OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content as a URL within the Technical Support Hyperlink Manager.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00241 Published 2025-10-07 Fixed in 11.13.3.0 CWE-79
TI-2025-38320 CVE-2025-61997 · GHSA-9m7h-pc4q-w67m

OPEXUS FOIAXpress stored XSS via banner image

Priority LOW 22

OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Enterprise Banner image upload field.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00241 Published 2025-10-07 Fixed in 11.13.3.0 CWE-79
TI-2025-38319 CVE-2025-61996 · GHSA-r5fq-j3c2-575m

OPEXUS FOIAXpress stored XSS via annual report template

Priority LOW 22

OPEXUS FOIAXpress before 11.13.3.0 allows an administrative user to inject JavaScript or other content within the Annual Report Template.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00241 Published 2025-10-07 Fixed in 11.13.3.0 CWE-79
Open these records in search →