OP
Product
OpenEMR
221
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 15High 82Medium 115Low 2
Watch
Add OpenEMR to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32126 | 8.1 | Mar 11 | OpenEMR: Inverted ACL Condition in CDR ControllerRouter Allows Any Authenticated User to Modify/Delete Clinical Rules and Plans Affected: before 8.0.0.1 |
| CVE-2026-25146 | 8.1 | Mar 3 | OpenEMR's payments gateway_api_key secret rendered into client JS code Affected: 5.0.2 before 8.0.0 |
| CVE-2026-25164 | 8.1 | Feb 25 | OpenEMR's Document and Insurance REST Endpoints Skip ACL Affected: before 8.0.0 |
| CVE-2025-67752 | 8.1 | Feb 25 | OpenEMR Has Disabled SSL Certificate Verification in HTTP Client Affected: before 7.0.4 |
| CVE-2023-2950 | 8.1 | May 28 | Improper Authorization in openemr/openemr Affected: before 7.0.1 |
| CVE-2023-2946 | 8.1 | May 27 | Improper Access Control in openemr/openemr Affected: before 7.0.1 |
| CVE-2023-2942 | 8.1 | May 27 | Improper Input Validation in openemr/openemr Affected: before 7.0.1 |
| CVE-2022-4567 | 8.1 | Dec 17 | Improper Access Control in openemr/openemr Affected: before 7.0.0.2 |
| CVE-2022-2493 | 8.1 | Jul 22 | Data Access from Outside Expected Data Manager Component in openemr/openemr Affected: before 7.0.0 |
| CVE-2022-25471 | 8.1 | Mar 2 | An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to… Affected: 6.0.0 |
| CVE-2021-25923 | 8.1 | Jun 24 | In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum password length limit Affected: 5.0.0 through 6.0.0.1 |
| CVE-2017-1000241 | 8.1 | Nov 17 | The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability Affected: through 5.0.1 |
| CVE-2026-33321 | 7.6 | Mar 19 | OpenEMR has Out-of-Band Server-Side Request Forgery (OOB SSRF) Affected: before 8.0.0.2 |
| CVE-2025-43860 | 7.6 | May 23 | OpemEMR Vulnerable to Stored XSS Attack in the Additional Address Section of Patient Demographics Affected: before 7.0.3.4 |
| CVE-2025-32794 | 7.6 | May 23 | OpenEMR Stored XSS via Patient Name Field in Procedure Orders Affected: before 7.0.3.4 |
| CVE-2023-54347 | 7.5 | May 5 | OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass Affected: 7.0.1 |
| CVE-2026-25476 | 7.5 | Feb 25 | OpenEMR has Session Timeout Bypass via skip_timeout_reset Affected: before 8.0.0 |
| CVE-2025-31117 | 7.5 | Mar 31 | OpenEMR Out-of-Band Server-Side Request Forgery (OOB SSRF) Vulnerability Affected: before 7.0.3.1 |
| CVE-2025-29789 | 7.5 | Mar 25 | OpenEMR Has Directory Traversal in Load Code feature Affected: before 7.0.3 |
| CVE-2023-22974 | 7.5 | Feb 22 | A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server Affected: before 7.0.0 |
| CVE-2022-4504 | 7.5 | Dec 15 | Improper Input Validation in openemr/openemr Affected: before 7.0.0.2 |
| CVE-2017-16540 | 7.5 | Nov 4 | OpenEMR before 5.0.0 Patch 5 allows unauthenticated remote database copying because setup.php exposes functionality for cloning an existing OpenEMR site to an arbitrary… Affected: before 5.0.0 |
| CVE-2017-12064 | 7.5 | Aug 1 | The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a crafted name Affected: 5.0.0 |
| CVE-2026-39931 | 7.2 | Aug 3 | OpenEMR Authenticated SQL Injection via backup.php Import Feature Affected: through 8.2.0 |
| CVE-2026-33914 | 7.2 | Mar 25 | OpenEMR has SQL Injection in PostCalendar Category Delete Affected: before 8.0.0.3 |
| CVE-2020-29143 | 7.2 | Feb 15 | A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the… Affected: before 5.0.2.5 |
| CVE-2020-29140 | 7.2 | Feb 15 | A SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via… Affected: before 5.0.2.5 |
| CVE-2020-29139 | 7.2 | Feb 15 | A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute… Affected: before 5.0.2.5 |
| CVE-2020-29142 | 7.2 | Feb 15 | A SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the… Affected: before 5.0.2.5 |
| CVE-2019-8371 | 7.2 | Sep 16 | OpenEMR v5.0.1-6 allows code execution Affected: 5.0.1-6 |
| CVE-2026-25147 | 7.1 | Feb 27 | OpenEMR's Portal Payment Endpoint Trusts User-Controlled pid Affected: before 8.0.0 |
| CVE-2026-25927 | 7.1 | Feb 25 | OpenEMR Missing Authorization Checks in DICOM Viewer State API Affected: before 8.0.0 |