AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-22232

MEDIUM · CVSS 5.5 EPSS 0.21%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-01-08 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.5. It affects Java. Exploitation may require the attacker to be authenticated.

CVE
CVE-2026-22232
Severity
MEDIUM
CVSS
5.5
EPSS
0.21%
Java

Original NVD Description

OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript in the "A or SIC Number" field within the Project Setup functionality. The JavaScript is executed whenever another user views the project. Fixed in OPEXUS eCASE Audit 11.14.2.0.

Related CVEs

Other vulnerabilities affecting the same vendor(s)