DH
Vendor
Dhis2
20
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55083 | DH dhis2-core dhis2 | 9.1 | Oct 1 | DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE) |
| CVE-2026-55082 | DH dhis2-core dhis2 | 8.7 | Jul 21 | DHIS2 SQL injection in SQL View filter values |
| CVE-2026-55081 | DH dhis2-core dhis2 | 7.3 | Jul 21 | DHIS2 Reflected XSS in OpenAPI HTML scope parameter |
| CVE-2026-55084 | DH dhis2-core dhis2 | 8.8 | Jul 21 | SQL Injection in SqlView Filter Parameter Leading to Arbitrary Database Read |
| CVE-2023-32060 | DH dhis2-core dhis2 | 6.5 | May 9 | DHIS2 Core Improper Access Control with Category Option Combination sharing in /api/trackedEntityInstance and /api/events |
| CVE-2023-31139 | DH dhis2-core dhis2 | 7.5 | May 9 | DHIS2 Core unrestricted session cookies with Personal Access Tokens |
| CVE-2023-31138 | DH dhis2-core dhis2 | 6.5 | May 9 | DHIS2 Core vulnerable to Improper Access Control with PATCH requests |
| CVE-2022-41947 | DH dhis2-core dhis2 | 5.4 | Dec 8 | Cross-site Scripting with user-uploaded files in dhis2-core |
| CVE-2022-41948 | DH dhis2-core dhis2 | 7.2 | Dec 8 | Privilege Chaining with the user admin role in dhis2-core |
| CVE-2022-41949 | DH dhis2-core dhis2 | 4.3 | Dec 8 | Semi-blind Server-Side Request Forgery in dhis2-core |
| CVE-2022-24848 | D2 Dhis 2 Dhis2 | 8.8 | Jun 1 | DHIS2 is an information system for data capture, management, validation, analytics and visualization |
| CVE-2021-41187 | D2 Dhis 2 Dhis2 | 8.8 | Nov 1 | DHIS 2 is an information system for data capture, management, validation, analytics and visualization |
| CVE-2021-39179 | D2 Dhis 2 Dhis2 | 8.8 | Oct 29 | DHIS 2 is an information system for data capture, management, validation, analytics and visualization |
| CVE-2021-32704 | D2 Dhis 2 Dhis2 | 8.8 | Jun 24 | DHIS 2 is an information system for data capture, management, validation, analytics and visualization |