Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: OPEXUS eCASE Audit 11.14.2.0 Clear all filters
TI-2026-17843 CVE-2026-22233 · GHSA-xgp7-wwhw-7q3c

OPEXUS eCASE Audit Project Cost stored XSS

Priority LOW 22

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment in the "Estimated Staff Hours" field.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00236 Published 2026-01-08 Fixed in 11.14.2.0 CWE-79
TI-2026-17842 CVE-2026-22232 · GHSA-mj74-6q5x-phrf

OPEXUS eCASE Audit Project Setup stored XSS

Priority LOW 22

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the "A or SIC Number" field within the Project Setup functionality.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00236 Published 2026-01-08 Fixed in 11.14.2.0 CWE-79