Skip to content

Open-emr Openemr vulnerabilities

open-emr openemrOpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'scan'...CVE-2018-10002195.4 MediumAugust 20, 2018
open-emr openemrOpenEMR version v5_0_1_4 contains a Cross Site Scripting (XSS) vulnerability in The 'file'...CVE-2018-10002185.4 MediumAugust 20, 2018
open-emr openemrOS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote...CVE-2018-15156EPSS 10.2%8.8 HighAugust 15, 2018
open-emr openemrOS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote...CVE-2018-15155EPSS 10.2%8.8 HighAugust 15, 2018
open-emr openemrOS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote...CVE-2018-15154EPSS 10.2%8.8 HighAugust 15, 2018
open-emr openemrOS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote...CVE-2018-15153EPSS 61.2%8.8 HighAugust 15, 2018
open-emr openemrAuthentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before...CVE-2018-15152Public exploitEPSS 25.0%9.1 CriticalAugust 15, 2018
open-emr openemrSQL injection vulnerability in interface/de_identification_forms/find_code_popup.php in versions...CVE-2018-151518.8 HighAugust 15, 2018
open-emr openemrSQL injection vulnerability in interface/de_identification_forms/de_identification_screen2.php in...CVE-2018-151508.8 HighAugust 15, 2018
open-emr openemrSQL injection vulnerability in interface/forms/eye_mag/php/Anything_simple.php from library/forms...CVE-2018-151498.8 HighAugust 15, 2018
open-emr openemrSQL injection vulnerability in interface/patient_file/encounter/search_code.php in versions of...CVE-2018-151488.8 HighAugust 15, 2018
open-emr openemrSQL injection vulnerability in interface/forms_admin/forms_admin.php from library/registry.inc in...CVE-2018-151478.8 HighAugust 15, 2018
open-emr openemrSQL injection vulnerability in interface/de_identification_forms/find_immunization_popup.php in...CVE-2018-151468.8 HighAugust 15, 2018
open-emr openemrMultiple SQL injection vulnerabilities in portal/add_edit_event_user.php in versions of OpenEMR...CVE-2018-151459.8 CriticalAugust 13, 2018
open-emr openemrSQL injection vulnerability in interface/de_identification_forms/find_drug_popup.php in versions...CVE-2018-151448.8 HighAugust 13, 2018
open-emr openemrMultiple SQL injection vulnerabilities in portal/find_appt_popup_user.php in versions of OpenEMR...CVE-2018-151439.8 CriticalAugust 13, 2018
open-emr openemrDirectory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a...CVE-2018-15142Public exploitEPSS 18.0%8.8 HighAugust 13, 2018
open-emr openemrDirectory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a...CVE-2018-15141Public exploitEPSS 14.3%6.5 MediumAugust 13, 2018
open-emr openemrDirectory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a...CVE-2018-15140Public exploitEPSS 16.5%6.5 MediumAugust 13, 2018
open-emr openemrUnrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5...CVE-2018-15139Public exploitEPSS 19.0%8.8 HighAugust 13, 2018
open-emr openemrinterface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to...CVE-2018-9250EPSS 30.6%8.8 HighMay 18, 2018
open-emr openemrinterface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to...CVE-2018-105738.8 HighApril 30, 2018
open-emr openemrinterface/patient_file/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to...CVE-2018-105726.5 MediumApril 30, 2018
open-emr openemrMultiple reflected cross-site scripting (XSS) vulnerabilities in OpenEMR before 5.0.1 allow...CVE-2018-105716.1 MediumApril 30, 2018
open-emr openemrOpenEMR version 5.0.0 contains a Cross Site Scripting (XSS) vulnerability in open-flash-chart.swf...CVE-2018-10000206.1 MediumFebruary 9, 2018
open-emr openemrOpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can...CVE-2018-10000198.8 HighFebruary 9, 2018
open-emr openemrThe application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege...CVE-2017-10002418.1 HighNovember 17, 2017
open-emr openemrThe application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting (XSS)...CVE-2017-10002405.4 MediumNovember 17, 2017
open-emr openemrOpenEMR before 5.0.0 Patch 5 allows unauthenticated remote database copying because setup.php...CVE-2017-165407.5 HighNovember 4, 2017
open-emr openemrThe csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior...CVE-2017-120647.5 HighAugust 1, 2017
open-emr openemrOpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can...CVE-2017-9380Public exploitEPSS 15.2%8.8 HighJune 2, 2017
open-emr openemrMultiple Cross-Site Scripting (XSS) issues were discovered in OpenEMR 5.0.0 and 5.0.1-dev. The...CVE-2017-63946.1 MediumMarch 2, 2017
open-emr openemrinterface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers...CVE-2015-44535.0 MediumJuly 5, 2015
open-emr openemrMultiple SQL injection vulnerabilities in OpenEMR 4.1.2 (Patch 7) and earlier allow remote...CVE-2014-5462Public exploit6.5 MediumDecember 8, 2014
open-emr openemrCross-site scripting (XSS) vulnerability in interface/main/onotes/office_comments_full.php in...CVE-2013-4620Public exploit4.3 MediumAugust 9, 2013
open-emr openemrMultiple SQL injection vulnerabilities in OpenEMR 4.1.1 allow remote authenticated users to...CVE-2013-46196.5 MediumAugust 9, 2013
open-emr openemrSQL injection vulnerability in interface/login/validateUser.php in OpenEMR 4.1.0 and possibly...CVE-2012-2115Public exploit7.5 HighSeptember 9, 2012
open-emr openemrUnrestricted file upload vulnerability in the patient photograph functionality in OpenEMR 4...CVE-2011-5161Public exploit6.8 MediumSeptember 9, 2012
open-emr openemrCross-site scripting (XSS) vulnerability in setup.php in OpenEMR 4 allows remote attackers to...CVE-2011-5160Public exploit4.3 MediumSeptember 9, 2012