Description
OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/DocumentUploadPub.aspx'. Users would see these unexpected files in cases. Uploading a large number of files could consume storage.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OPEXUS | eComplaint | < 10.1.0.0 | 10.1.0.0 |
Advisories 1
- VA-26-077-01 OPEXUS eComplaint and eCase multiple vulnerabilities CISA ICS & IT advisories · Mar 19, 2026