VULNERABILITY INTELLIGENCE

CVE-2026-22232

CVSS score5.5 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2026-01-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Description

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the "A or SIC Number" field within the Project Setup functionality. The JavaScript is executed whenever another user views the project. Fixed in OPEXUS eCASE Audit 11.14.2.0.

Weakness classification

  • 9119a7d8-5eab-497f-8521-727c672e3725: CWE-79

Primary references