Skip to content
OpenAdvisories

Vendor

OPEXUS

20 known vulnerabilities.

Products

FOIAXpress 5 eComplaint 5 eCASE 4 eCASE Audit 4 FOIAXpress Public Access Link (PAL) 4 eCase Portal 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-22235

    OPEXUS eComplaint IDOR

    OPEXUS eComplaint before version 9.0.45.0 allows an attacker to visit the the 'DocumentOpen.aspx' endpoint, iterate through predictable values of 'chargeNumber', and download any uploaded files.

    OPEXUS eComplaint
  • High 7.6
    CVE-2026-22230

    OPEXUS eCASE Audit incorrect access control

    OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by an administrator. Fixed in eCASE Platform 11.14.1.0.

    OPEXUS eCASE Audit