Lucene search
K

5 matches found

OSV
OSV
added 2026/01/08 6:15 p.m.2 views

CVE-2026-22231

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality. The JavaScript is executed whenever another user views the Action History Log. Fixed in OPEXUS eCASE Platform 11.14.1.0...

5.4CVSS5.8AI score0.00207EPSS
Exploits0References3
NVD
NVD
added 2026/01/08 6:15 p.m.4 views

CVE-2026-22231

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality. The JavaScript is executed whenever another user views the Action History Log. Fixed in OPEXUS eCASE Platform 11.14.1.0...

5.5CVSS0.00207EPSS
Exploits0References3
CVE
CVE
added 2026/01/08 5:10 p.m.8 views

CVE-2026-22231

OPEXUS eCASE Audit is affected by a stored XSS in the Document Check Out comments. An authenticated attacker can save JavaScript as a comment, which is executed when another user views the Action History Log. Affected product: OPEXUS eCASE Audit (server-side application). Root cause: stored JavaS...

5.5CVSS6.3AI score0.00207EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2026/01/08 5:10 p.m.20 views

CVE-2026-22231 OPEXUS eCASE Audit Document Check Out stored XSS

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality. The JavaScript is executed whenever another user views the Action History Log. Fixed in OPEXUS eCASE Platform 11.14.1.0...

5.5CVSS0.00207EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/08 5:10 p.m.4 views

CVE-2026-22231 OPEXUS eCASE Audit Document Check Out stored XSS

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality. The JavaScript is executed whenever another user views the Action History Log. Fixed in OPEXUS eCASE Platform 11.14.1.0...

5.5CVSS6.3AI score0.00207EPSS
Exploits0References3
Rows per page
Query Builder