Vulnerabilities

TI-2026-25327 CVE-2026-32866 · GHSA-659m-rw9h-f7v8

OPEXUS eComplaint and eCase stored XSS via profile first and last name

LOW 22

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00147 Published 2026-03-19 Fixed in 10.1.0.0 CWE-79

TI-2026-25326 CVE-2026-32865 · GHSA-54h7-v9wj-85j9

OPEXUS eComplaint and eCase insecure password reset

MEDIUM 42

OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00319 Published 2026-03-19 Fixed in 10.1.0.0 CWE-200

Vulnerabilities

Filters

OPEXUS eComplaint and eCase stored XSS via profile first and last name

OPEXUS eComplaint and eCase insecure password reset