Description
OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by an administrator. Fixed in eCASE Platform 11.14.1.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OPEXUS | eCASE Audit | 11.4.0 – < 11.14.1.0 | 11.14.1.0 |
Advisories 1
- VA-26-008-01 OPEXUS eCASE CISA ICS & IT advisories · Jan 8, 2026