Skip to content
OpenAdvisories

Product · OPEXUS

eComplaint

5 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    OPEXUS eComplaint and eCase insecure password reset

    OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'. An attacker who knows an existing user's email address can reset the user's password …