OPEXUS

Products

ProductCVEsExploitedLatest
eComplaint5–Mar 19, 2026
FOIAXpress5–Oct 16, 2025
eCASE4–Mar 19, 2026
eCASE Audit4–Jan 8, 2026
FOIAXpress Public Access Link (PAL)4–Sep 9, 2025
eCase Portal1–Jan 8, 2026

Exploited and recent CVEs

  • CVE-2026-32869 Medium 5.5 OPEXUS eComplaint and eCASE XSS via Name of Organization field 0.1%
  • CVE-2026-32869 Medium 5.5 OPEXUS eComplaint and eCASE XSS via Name of Organization field 0.1%
  • CVE-2026-32868 Medium 5.5 OPEXUS eComplaint and eCASE XSS via my information 0.1%
  • CVE-2026-32868 Medium 5.5 OPEXUS eComplaint and eCASE XSS via my information 0.1%
  • CVE-2026-32867 Medium 5.4 OPEXUS eComplaint unauthenticated file upload 0.2%
  • CVE-2026-32866 Medium 5.5 OPEXUS eComplaint and eCase stored XSS via profile first and last name 0.1%
  • CVE-2026-32865 Critical 9.8 OPEXUS eComplaint and eCase insecure password reset 0.3%
  • CVE-2026-32865 Critical 9.8 OPEXUS eComplaint and eCase insecure password reset 0.3%
  • CVE-2026-22235 High 7.5 OPEXUS eComplaint IDOR 0.4%
  • CVE-2026-22234 Critical 9.8 OPEXUS eCasePortal unauthenticated IDOR 0.4%
  • CVE-2026-22233 Medium 5.5 OPEXUS eCASE Audit Project Cost stored XSS 0.2%
  • CVE-2026-22232 Medium 5.5 OPEXUS eCASE Audit Project Setup stored XSS 0.2%
  • CVE-2026-22231 Medium 5.5 OPEXUS eCASE Audit Document Check Out stored XSS 0.2%
  • CVE-2026-22230 High 7.6 OPEXUS eCASE Audit incorrect access control 0.3%
  • CVE-2025-62586 Critical 9.8 OPEXUS FOIAXpress unauthenticated administrator password reset 0.7%
  • CVE-2025-61999 Medium 4.3 OPEXUS FOIAXpress stored XSS via logo image 0.2%
  • CVE-2025-61998 Medium 4.3 OPEXUS FOIAXpress stored XSS via Hyperlink Manager 0.2%
  • CVE-2025-61997 Medium 4.3 OPEXUS FOIAXpress stored XSS via banner image 0.2%
  • CVE-2025-61996 Medium 4.3 OPEXUS FOIAXpress stored XSS via annual report template 0.2%
  • CVE-2025-58462 Critical 9.8 OPEXUS FOIAXpress PAL SQL injection 0.7%
  • CVE-2025-54833 Medium 5.3 OPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass 0.6%
  • CVE-2025-54834 Medium 5.3 OPEXUS FOIAXpress Public Access Link (PAL) unauthenticated username enumeration 0.6%
  • CVE-2025-54832 Medium 4.3 OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification 0.4%