PT-2026-2173 · Unknown · Opexus Ecase

Aaron M. Ramirez + 3 · Publicado 2026-01-08 · Atualizado 2026-01-09 · CVE-2026-22231

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions OPEXUS eCASE versions prior to 11.14.1.0

Description OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment within the Document Check Out functionality. This JavaScript is executed when another user views the Action History Log. The issue is a stored cross-site scripting (XSS) condition. The vulnerable functionality is related to the Document Check Out feature and the ability to add comments.

Recommendations Update OPEXUS eCASE to version 11.14.1.0 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-22231

Produtos afetados

Opexus Ecase

Referências · 8

• https://docs.opexustech.com/docs/eCase/11.14.X/eCASE_Release_Notes_11.14.1.0.pdf · Nota
• https://cve.org/CVERecord?id=CVE-2026-22231 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-22231 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-22231 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2009495531676991969 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2009462347199545429 · Publicação no Twitter
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-008-01.json · Nota
• https://t.me/CVEtracker/41750 · Publicação no Telegram