Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: OPEXUS eComplaint 10.1.0.0 Clear all filters
TI-2026-25328 CVE-2026-32867 · GHSA-qw9c-jpw9-vj74

OPEXUS eComplaint unauthenticated file upload

Priority LOW 29

OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00201 Published 2026-03-19 Fixed in 10.1.0.0 CWE-425
TI-2026-25326 CVE-2026-32865 · GHSA-54h7-v9wj-85j9

OPEXUS eComplaint and eCase insecure password reset

Priority MEDIUM 42

OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00319 Published 2026-03-19 Fixed in 10.1.0.0 CWE-200