CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It affects Java. Exploitation may require the attacker to be authenticated.
CVE
CVE-2026-22233
Severity
MEDIUM
CVSS
5.5
EPSS
0.21%
Java
Original NVD Description
OPEXUS eCASE Audit allows an authenticated attacker to save JavaScript as a comment in the "Estimated Staff Hours" field. The JavaScript is executed whenever another user visits the Project Cost tab. Fixed in OPEXUS eCASE Audit 11.14.2.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)