Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: OPEXUS Component: Ecase Audit Clear all filters
TI-2026-17843 CVE-2026-22233 · GHSA-xgp7-wwhw-7q3c

OPEXUS eCASE Audit Project Cost stored XSS

Priority LOW 22

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment in the "Estimated Staff Hours" field.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00236 Published 2026-01-08 Fixed in 11.14.2.0 CWE-79
TI-2026-17842 CVE-2026-22232 · GHSA-mj74-6q5x-phrf

OPEXUS eCASE Audit Project Setup stored XSS

Priority LOW 22

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the "A or SIC Number" field within the Project Setup functionality.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00236 Published 2026-01-08 Fixed in 11.14.2.0 CWE-79
TI-2026-17841 CVE-2026-22231 · GHSA-7cgr-2c4h-cvgf

OPEXUS eCASE Audit Document Check Out stored XSS

Priority LOW 22

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00236 Published 2026-01-08 Fixed in 11.14.1.0 CWE-79
TI-2026-17840 CVE-2026-22230 · GHSA-mc6v-g8qv-fwmp

OPEXUS eCASE Audit incorrect access control

Priority HIGH 65

OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by an administrator.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00316 Published 2026-01-08 Fixed in 11.14.1.0 CWE-863