Skip to contentIqonicdesign Kivicare – Clinic & Patient Management System (ehr) vulnerabilities
- iqonicdesign kivicare – clinic & patient management system (ehr)KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' ParameterCVE-2026-154536.5 Medium
- iqonicdesign kivicare – clinic & patient management system (ehr)KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in KCQueryBuilderCVE-2026-150726.5 Medium
- iqonicdesign kivicare – clinic & patient management system (ehr)KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in DoctorSessionControllerCVE-2026-150736.5 Medium
- iqonicdesign kivicare – clinic & patient management system (ehr)KiviCare <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation via /payment-success REST EndpointCVE-2026-119905.3 Medium
- iqonicdesign kivicare – clinic & patient management system (ehr)KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup WizardCVE-2026-29928.2 High
- iqonicdesign kivicare – clinic & patient management system (ehr)KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login TokenCVE-2026-2991Public exploit7.3 High
- iqonicdesign kivicare – clinic & patient management system (ehr)KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File UploadCVE-2026-09275.3 Medium
- iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 moreKiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' ParameterCVE-2025-15726.5 Medium
- iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 moreKiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL InjectionCVE-2024-117296.5 Medium
- iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 moreKiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL InjectionCVE-2024-117306.5 Medium
- iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 moreKiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL InjectionCVE-2024-11728Public exploitEPSS 13.6%7.5 High
- iqonic kivicare, iqonicdesign kivicare – clinic & patient management system (ehr) +1 moreKiviCare < 2.3.9 - Unauthenticated SQLiCVE-2022-0786EPSS 13.3%9.8 Critical