OP
Product
openemr/openemr
37
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 10Medium 26Low 1
Watch
Add openemr/openemr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-2943 | 8.8 | May 27 | Code Injection in openemr/openemr Affected: before 7.0.1 |
| CVE-2022-4506 | 8.8 | Dec 15 | Unrestricted Upload of File with Dangerous Type in openemr/openemr Affected: before 7.0.0.2 |
| CVE-2022-2732 | 8.3 | Aug 9 | Missing Authorization in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2022-1459 | 8.3 | Apr 25 | Non-Privilege User Can View Patient’s Disclosures in openemr/openemr Affected: before 6.1.0.1 |
| CVE-2023-2950 | 8.1 | May 28 | Improper Authorization in openemr/openemr Affected: before 7.0.1 |
| CVE-2023-2946 | 8.1 | May 27 | Improper Access Control in openemr/openemr Affected: before 7.0.1 |
| CVE-2023-2942 | 8.1 | May 27 | Improper Input Validation in openemr/openemr Affected: before 7.0.1 |
| CVE-2022-4567 | 8.1 | Dec 17 | Improper Access Control in openemr/openemr Affected: before 7.0.0.2 |
| CVE-2022-2493 | 8.1 | Jul 22 | Data Access from Outside Expected Data Manager Component in openemr/openemr Affected: before 7.0.0 |
| CVE-2022-4504 | 7.5 | Dec 15 | Improper Input Validation in openemr/openemr Affected: before 7.0.0.2 |
| CVE-2022-2730 | 6.5 | Aug 9 | Authorization Bypass Through User-Controlled Key in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2022-1461 | 6.5 | Apr 25 | Non Privilege User can Enable or Disable Registered in openemr/openemr Affected: before 6.1.0.1 |
| CVE-2023-2948 | 6.1 | May 28 | Cross-site Scripting (XSS) - Generic in openemr/openemr Affected: before 7.0.1 |
| CVE-2023-2949 | 6.1 | May 28 | Cross-site Scripting (XSS) - Reflected in openemr/openemr Affected: before 7.0.1 |
| CVE-2022-4615 | 6.1 | Dec 19 | Cross-site Scripting (XSS) - Reflected in openemr/openemr Affected: before 7.0.0.2 |
| CVE-2022-4503 | 6.1 | Dec 15 | Cross-site Scripting (XSS) - Generic in openemr/openemr Affected: before 7.0.0.2 |
| CVE-2022-4502 | 6.1 | Dec 15 | Cross-site Scripting (XSS) - Reflected in openemr/openemr Affected: before 7.0.0.2 |
| CVE-2022-2733 | 6.1 | Aug 9 | Cross-site Scripting (XSS) - Reflected in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2022-2731 | 6.1 | Aug 9 | Cross-site Scripting (XSS) - Reflected in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2023-2945 | 5.4 | May 27 | Missing Authorization in openemr/openemr Affected: before 7.0.1 |
| CVE-2023-2944 | 5.4 | May 27 | Improper Access Control in openemr/openemr Affected: before 7.0.1 |
| CVE-2022-2824 | 5.4 | Aug 15 | Authorization Bypass Through User-Controlled Key in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2022-2734 | 5.4 | Aug 9 | Improper Restriction of Rendered UI Layers or Frames in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2022-2729 | 5.4 | Aug 9 | Cross-site Scripting (XSS) - DOM in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2022-2494 | 5.4 | Jul 22 | Cross-site Scripting (XSS) - Stored in openemr/openemr Affected: before 7.0.0 |
| CVE-2022-1458 | 5.4 | Apr 25 | Stored XSS Leads To Session Hijacking in openemr/openemr Affected: before 6.1.0.1 |
| CVE-2022-1179 | 5.4 | Mar 30 | Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr Affected: before 6.0.0.4 |
| CVE-2022-1181 | 5.4 | Mar 30 | Stored Cross Site Scripting in openemr/openemr Affected: before 6.0.0.2 |
| CVE-2022-1178 | 5.4 | Mar 30 | Stored Cross Site Scripting in openemr/openemr Affected: before 6.0.0.4 |
| CVE-2024-0875 | 4.8 | Nov 15 | Stored XSS in openemr/openemr Affected: before 7.0.2.1 |
| CVE-2023-2947 | 4.8 | May 27 | Cross-site Scripting (XSS) - Stored in openemr/openemr Affected: before 7.0.1 |
| CVE-2023-2566 | 4.8 | May 8 | Cross-site Scripting (XSS) - Stored in openemr/openemr Affected: before 7.0.1 |
| CVE-2022-4733 | 4.8 | Dec 24 | Cross-site Scripting (XSS) - Stored in openemr/openemr Affected: before 7.0.0.2 |
| CVE-2023-2674 | 4.3 | May 12 | Improper Access Control in openemr/openemr Affected: before 7.0.1 |
| CVE-2022-4505 | 4.3 | Dec 15 | Authorization Bypass Through User-Controlled Key in openemr/openemr Affected: before 7.0.0.2 |
| CVE-2022-1177 | 4.3 | Mar 30 | Accounting User Can Download Patient Reports in openemr in openemr/openemr Affected: before 6.1.0 |
| CVE-2022-1180 | 3.5 | Mar 30 | Reflected Cross Site Scripting in openemr/openemr Affected: before 6.0.0.4 |
Showing 37