Ecase Portal
1 CVEs
product
Monthly
OPEXUS eCasePortal before 9.0.45.0 allows unauthenticated access to the Attachments.aspx endpoint with predictable formid values. Attackers can download, delete, or upload files without authentication.
Authentication Bypass
Ecase Portal
NVD
CVSS 3.1
9.8
EPSS
0.0%
EPSS 0%
CVSS 9.8
CRITICAL
Act Now
OPEXUS eCasePortal before 9.0.45.0 allows unauthenticated access to the Attachments.aspx endpoint with predictable formid values. Attackers can download, delete, or upload files without authentication.
Authentication Bypass
Ecase Portal
NVD