CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

NVD•added 2026/01/08 6:16 p.m.•28 views

CVE-2026-22235

OPEXUS eComplaint before version 9.0.45.0 allows an attacker to visit the the 'DocumentOpen.aspx' endpoint, iterate through predictable values of 'chargeNumber', and download any uploaded files...

8.7CVSS0.00352EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2026/01/08 12:00 a.m.•10 views

CVE-2026-22235: Authorization Bypass Through User-Controlled Key

OPEXUS eComplaint before version 9.0.45.0 allows an attacker to visit the the 'DocumentOpen.aspx' endpoint, iterate through predictable values of 'chargeNumber', and download any uploaded files...

8.7CVSS5.9AI score0.00352EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by