Opexustech Ecase Audit — known CVE vulnerabilities

Every CVE whose affected-product data names Opexustech Ecase Audit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-22230 — CVSS 7.6 (high): OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons…
• CVE-2026-22231 — CVSS 5.5 (medium): OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality. The…
• CVE-2026-22232 — CVSS 5.5 (medium): OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the "A or SIC Number" field within the Project Setup…
• CVE-2026-22233 — CVSS 5.5 (medium): OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment in the "Estimated Staff Hours" field. The JavaScript is…