Advisories · Technology

OPEXUS FOIAXpress Public Access Link (PAL).

Every CVE that names OPEXUS FOIAXpress Public Access Link (PAL) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-58462 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

OPEXUS FOIAXpress PAL SQL injection
- OPEXUS FOIAXpress Public Access Link (PAL)
- SQL injection
Not analysed yet 9 Sept 2025
CVE-2025-54833 CVE record

CVSS 6.9 Medium

OPEXUS FOIAXpress Public Access Link (PAL) account-lockout and CAPTCHA protection bypass
- OPEXUS FOIAXpress Public Access Link (PAL)
- Authentication bypass
- CWE-602
Not analysed yet 31 Jul 2025
CVE-2025-54834 CVE record

CVSS 6.9 Medium

OPEXUS FOIAXpress Public Access Link (PAL) unauthenticated username enumeration
- OPEXUS FOIAXpress Public Access Link (PAL)
- CWE-204
Not analysed yet 31 Jul 2025
CVE-2025-54832 CVE record

CVSS 5.3 Medium

OPEXUS FOIAXpress Public Access Link (PAL) state and territory list unauthorized modification
- OPEXUS FOIAXpress Public Access Link (PAL)
- CWE-472
Not analysed yet 31 Jul 2025