Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

OPEXUS — Vulnerabilities & Security Advisories 20

Browse all 20 CVE security advisories affecting OPEXUS. AI-powered Chinese analysis, POCs, and references for each vulnerability.

OPEXUS operates as a specialized platform for managing operational expenditure, primarily serving enterprise finance and procurement workflows. Security audits have identified twenty recorded Common Vulnerabilities and Exposures (CVEs) associated with its infrastructure, indicating a history of significant technical debt. The most prevalent vulnerability classes include Remote Code Execution (RCE) and Cross-Site Scripting (XSS), which pose critical risks to data integrity and user sessions. Additionally, instances of broken access control and privilege escalation have been documented, suggesting weaknesses in identity management and authorization logic. These flaws often stem from outdated dependencies or insufficient input validation within the application’s core modules. While no single catastrophic breach has been publicly attributed solely to OPEXUS, the cumulative effect of these twenty CVEs highlights systemic security gaps. Organizations utilizing this solution must prioritize immediate patching and rigorous penetration testing to mitigate the risk of exploitation in production environments.

CVE ID Title CVSS Severity Published
CVE-2026-32869 OPEXUS eComplaint and eCASE XSS via Name of Organization field — eComplaint CWE-79 5.5 Medium 2026-03-19
CVE-2026-32868 OPEXUS eComplaint and eCASE XSS via my information — eComplaint CWE-79 5.5 Medium 2026-03-19
CVE-2026-32867 OPEXUS eComplaint unauthenticated file upload — eComplaint CWE-639 5.4 Medium 2026-03-19
CVE-2026-32866 OPEXUS eComplaint and eCase stored XSS via profile first and last name — eCASE CWE-79 5.5 Medium 2026-03-19
CVE-2026-32865 OPEXUS eComplaint and eCase insecure password reset — eComplaint CWE-200 9.8 Critical 2026-03-19
CVE-2026-22235 OPEXUS eComplaint IDOR — eComplaint CWE-639 7.5 High 2026-01-08
CVE-2026-22234 OPEXUS eCasePortal unauthenticated IDOR — eCase Portal CWE-639 9.8 Critical 2026-01-08
CVE-2026-22233 OPEXUS eCASE Audit Project Cost stored XSS — eCASE Audit CWE-79 5.5 Medium 2026-01-08
CVE-2026-22232 OPEXUS eCASE Audit Project Setup stored XSS — eCASE Audit CWE-79 5.5 Medium 2026-01-08
CVE-2026-22231 OPEXUS eCASE Audit Document Check Out stored XSS — eCASE Audit CWE-79 5.5 Medium 2026-01-08
CVE-2026-22230 OPEXUS eCASE Audit incorrect access control — eCASE Audit CWE-863 7.6 High 2026-01-08
CVE-2025-62586 OPEXUS FOIAXpress unauthenticated administrator password reset — FOIAXpress CWE-306 9.8 Critical 2025-10-16
CVE-2025-61999 OPEXUS FOIAXpress stored XSS via logo image — FOIAXpress CWE-79 4.3 Medium 2025-10-07
CVE-2025-61998 OPEXUS FOIAXpress stored XSS via Hyperlink Manager — FOIAXpress CWE-79 4.3 Medium 2025-10-07
CVE-2025-61997 OPEXUS FOIAXpress stored XSS via banner image — FOIAXpress CWE-79 4.3 Medium 2025-10-07
CVE-2025-61996 OPEXUS FOIAXpress stored XSS via annual report template — FOIAXpress CWE-79 4.3 Medium 2025-10-07
CVE-2025-58462 OPEXUS FOIAXpress PAL SQL injection — FOIAXpress Public Access Link (PAL) CWE-89 9.8 Critical 2025-09-09
CVE-2025-54833 OPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass — FOIAXpress Public Access Link (PAL) CWE-307 5.3 Medium 2025-07-31
CVE-2025-54834 OPEXUS FOIAXpress Public Access Link (PAL) unauthenticated username enumeration — FOIAXpress Public Access Link (PAL) CWE-204 5.3 Medium 2025-07-31
CVE-2025-54832 OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification — FOIAXpress Public Access Link (PAL) CWE-472 4.3 Medium 2025-07-31

This page lists every published CVE security advisory associated with OPEXUS. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.