KC
Product
KiviCare – Clinic & Patient Management System (EHR)
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 7Low 0
Watch
Add KiviCare – Clinic & Patient Management System (EHR) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1572 | 8.8 | Feb 28 | KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter Affected: through 3.6.7 |
| CVE-2026-2992 | 8.2 | Mar 18 | KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard Affected: through 4.1.2 |
| CVE-2024-11728 | 7.5 | Dec 6 | KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection Affected: through 3.6.4 |
| CVE-2026-2991 | 7.3 | Mar 18 | KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token Affected: through 4.1.2 |
Showing 4