Lucene search
K

9 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:10 p.m.3 views

CVE-2026-32869

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of the "Name of Organization" field when filling out case information. An authenticated attacker can inject an XSS payload which is executed in the context of a victim's session when they visit the case information...

5.5CVSS5.8AI score0.00039EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/19 3:49 p.m.1 views

CVE-2026-32869

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of the "Name of Organization" field when filling out case information. An authenticated attacker can inject an XSS payload which is executed in the context of a victim's session when they visit the case information...

5.5CVSS5.8AI score0.00039EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/19 3:49 p.m.3 views

CVE-2026-32869 OPEXUS eComplaint and eCASE XSS via Name of Organization field

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of the "Name of Organization" field when filling out case information. An authenticated attacker can inject an XSS payload which is executed in the context of a victim's session when they visit the case information...

5.5CVSS5.8AI score0.00039EPSS
Exploits0References2
CVE
CVE
added 2026/03/19 3:49 p.m.2 views

CVE-2026-32869

CVE-2026-32869 affects OPEXUS eComplaint and eCASE prior to 10.2.0.0. The issue is improper sanitization of the Name of Organization field in case information, allowing an authenticated attacker to inject an XSS payload executed in the victim’s session when visiting the case information page. The...

5.5CVSS5.8AI score0.00039EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/19 12:0 a.m.1 views

PT-2026-26311

OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of the "Name of Organization" field when filling out case information. An authenticated attacker can inject an XSS payload which is executed in the context of a victim's session when they visit the case information...

5.5CVSS5.8AI score0.00039EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-34386

Malicious code in bioql PyPI...

6.3CVSS6.6AI score0.00091EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/01/17 5:21 a.m.11 views

CVE-2024-11146 TrueFiling authorization bypass via user-controlled keys

TrueFiling is a collaborative, web-based electronic filing system where attorneys, paralegals, court reporters and self-represented filers collect public legal documentation into cases. TrueFiling is an entirely cloud-hosted application. Prior to version 3.1.112.19, TrueFiling trusted some...

6.3CVSS0.00091EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/17 12:0 a.m.2 views

TrueFiling 安全漏洞

TrueFiling is a Web-based electronic filing system from TrueFiling, Inc. A security vulnerability exists in versions prior to TrueFiling 3.1.112.19 that stems from a vulnerability that allows a user to gain partial access to case information and the ability to change a user's access to case...

6.3CVSS6.4AI score0.00091EPSS
Exploits0References2
ICS
ICS
added 2025/01/16 12:0 a.m.2 views

TrueFiling authorization bypass via user-controlled keys

RISK EVALUATION TrueFiling trusts some client-controlled identifiers passed in URL requests to retrieve information. Platform users must self-register for an account, and once authenticated, could manipulate those identifiers to gain partial access to case information and the ability to...

6.3CVSS6.6AI score0.00091EPSS
Exploits0References1
Rows per page
Query Builder