Beveiligingsadvies

CVE-2026-32865

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-19 15:47:59

Laatst bijgewerkt 2026-03-19 18:20:51

Toegewezen door cisa-cg

CVSS-score 9.8

Status PUBLISHED

Beschrijving

OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'. An attacker who knows an existing user's email address can reset the user's password and security questions. Existing security questions are not asked during the process.

← Alle CVE's bekijken Bekijk op cve.org ↗