OP
Product
openmrs-core
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 0Low 0
Watch
Add openmrs-core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41258 | 9.1 | May 15 | OpenMRS: Stored Velocity SSTI to RCE via ConceptReferenceRange Affected: >= 2.7.0 < 2.7.9; >= 2.8.0 < 2.8.6 |
| CVE-2026-40076 | 8.8 | May 6 | OpenMRS Core arbitrary file write and code execution via Zip Slip in module upload Affected: <= 2.7.8; >= 2.8.0, <= 2.8.5 |
| CVE-2026-40075 | 7.5 | May 5 | OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet Affected: <= 2.7.8; >= 2.8.0, <= 2.8.5 |
| CVE-2022-23612 | 7.5 | Feb 22 | Directory Traversal in OpenMRS Startup Filter Affected: >= 1.6, < 2.1.5; >= 2.2.0, < 2.2.1; >= 2.3.0, < 2.3.5; >= 2.4.0, < 2.4.5; >= 2.5.0, < 2.5.3 |
Showing 4