Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-22231 EUVD-2026-1497GHSA-7cgr-2c4h-cvgf

OPEXUS eCASE Audit Document Check Out stored XSS

Published Jan 8, 2026 · Updated Jan 8, 2026 · Assigned by cisa-cg

Vendor: OPEXUS Product: eCASE Audit

Description

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality. The JavaScript is executed whenever another user views the Action History Log. Fixed in OPEXUS eCASE Platform 11.14.1.0.

Affected products

VendorProductAffectedFixed
OPEXUS eCASE Audit 11.4.0 – < 11.14.1.0 11.14.1.0

Advisories 1

References

  • url release-notes
  • url government-resource third-party-advisory
  • url vdb-entry