Vulnerabilidades do OPEXUS eCase Portal

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam OPEXUS eCase Portal: 1 registro(s), com versões afetadas e correções.

CVE-2026-22234 Crítica · 9.8 CWE-639 08/01/2026

OPEXUS eCasePortal unauthenticated IDOR

OPEXUS eCasePortal before version 9.0.45.0 allows an unauthenticated attacker to navigate to the 'Attachments.aspx' endpoint, iterate through predictable values of 'formid', and download or delete all user-uploaded files, or upload new files.