Approved changes feed: RSS · Atom

cpe:2.3:a:opexus:ecase_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpexus (399fd120-a70a-539f-9287-96058bb78107)
ProductEcase Portal (b2adc86c-fe1b-56b9-abd9-22ef18145305)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22234 vulnerable 2026-06-08 07:49:17.757410 OPEXUS eCasePortal unauthenticated IDOR
CRITICAL (9.8)
OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files.
Published: 2026-01-08T17:12:39.035Z
Updated: 2026-03-10T20:39:28.330Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.