Vendors / OPEXUS Records 21 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 3
Exploited now OPEXUS records in CISA KEV No OPEXUS vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 80
An issue in OPEXUS FOIAXPRESS PUBLIC ACCESS LINK v11.1.0 allows attackers to bypass authentication via crafted web requests.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00566 · Published 2025-01-16 · No fix listed CWE-863
Priority HIGH 70
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows an unauthenticated, remote attacker to query the /App/CreateRequest.aspx endpoint to check for the existence of valid usernames.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00562 · Published 2025-07-31 · Fixed in 11.12.3.0 CWE-204
Priority MEDIUM 57
OPEXUS FOIAXpress Public Access Link (PAL), version v11.1.0, allows an authenticated user to add entries to the list of states and territories.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00395 · Published 2025-07-31 · Fixed in 11.12.3.0 CWE-472
Priority MEDIUM 49
OPEXUS FOIAXpress Public Access Link (PAL) before version 11.13.1.0 allows SQL injection via SearchPopularDocs.aspx.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.0066 · Published 2025-09-09 · Fixed in 11.13.1.0 CWE-89
Priority LOW 37
OPEXUS FOIAXpress Public Access Link (PAL) version v11.1.0 allows attackers to bypass account-lockout and CAPTCHA protections.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00613 · Published 2025-07-31 · Fixed in 11.12.3.0 CWE-307
Open these records in search → All records by CVSS severity
4 3 14 0 0
THREATIST.IORead the docs