Skip to contentOpen-emr Openemr vulnerabilities
- open-emr openemrOpenEMR Stored XSS via Patient Name Field in Procedure OrdersCVE-2025-32794EPSS 10.5%7.6 High
- open-emr openemrOpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, ...CVE-2024-226119.8 Critical
- open-emr openemrOpenEMR allows XSS in Patient Image featureCVE-2025-31121EPSS 17.3%7.0 High
- open-emr openemrOpenEMR Out-of-Band Server-Side Request Forgery (OOB SSRF) VulnerabilityCVE-2025-311176.9 Medium
- open-emr openemrOpenEMR Stored XSS in OpenEMR Bronchitis FormCVE-2025-30161EPSS 10.9%8.4 High
- open-emr openemrOpenEMR Reflected XSS in AJAX ScriptCVE-2025-301496.4 Medium
- open-emr openemrOpenEMR allows Reflected XSS in CAMOS new.phpCVE-2025-297727.2 High
- open-emr openemrOpenEMR Has Directory Traversal in Load Code featureCVE-2025-297894.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreStored XSS in openemr/openemrCVE-2024-08758.1 High
- open-emr openemrAn issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST...CVE-2024-377349.8 Critical
- mpdf project mpdf, open-emr openemr +1 moreAn issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted...CVE-2024-264763.5 Low
- open-emr openemr, openemr openemr/openemr +1 moreImproper Authorization in openemr/openemrCVE-2023-29506.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2023-29498.3 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Generic in openemr/openemrCVE-2023-2948EPSS 96.7%8.3 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2023-2947EPSS 90.4%4.7 Medium
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2023-29466.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreMissing Authorization in openemr/openemrCVE-2023-29454.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2023-29446.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCode Injection in openemr/openemrCVE-2023-29434.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreImproper Input Validation in openemr/openemrCVE-2023-29428.1 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2023-26748.8 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2023-25667.5 High
- open-emr openemrA Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read...CVE-2023-22974Public exploit7.5 High
- open-emr openemrA Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0...CVE-2023-229738.8 High
- open-emr openemrA Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php...CVE-2023-229725.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2022-47336.7 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-46158.3 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2022-45678.1 High
- open-emr openemr, openemr openemr/openemr +1 moreUnrestricted Upload of File with Dangerous Type in openemr/openemrCVE-2022-45067.6 High
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemrCVE-2022-45058.8 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Input Validation in openemr/openemrCVE-2022-45047.1 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Generic in openemr/openemrCVE-2022-45036.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-45027.3 High
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemrCVE-2022-28248.8 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Restriction of Rendered UI Layers or Frames in openemr/openemrCVE-2022-273410.0 Critical
- open-emr openemr, openemr openemr/openemr +1 moreMissing Authorization in openemr/openemrCVE-2022-27328.3 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-2733EPSS 95.9%9.6 Critical
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-27315.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - DOM in openemr/openemrCVE-2022-27295.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemrCVE-2022-27306.5 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2022-24946.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreData Access from Outside Expected Data Manager Component in openemr/openemrCVE-2022-24938.3 High
- open-emr openemr, openemr openemr/openemr +1 moreNon Privilege User can Enable or Disable Registered in openemr/openemrCVE-2022-14618.1 High
- open-emr openemr, openemr openemr/openemr +1 moreNon-Privilege User Can View Patient’s Disclosures in openemr/openemrCVE-2022-14598.3 High
- open-emr openemr, openemr openemr/openemr +1 moreStored XSS Leads To Session Hijacking in openemr/openemrCVE-2022-14587.3 High
- phpgacl, open-emr openemr +1 moreMultiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request...CVE-2020-135678.8 High
- open-emr openemr, openemr openemr/openemr +1 moreNon-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemrCVE-2022-1179EPSS 76.9%4.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreReflected Cross Site Scripting in openemr/openemrCVE-2022-11804.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreStored Cross Site Scripting in openemr/openemrCVE-2022-1181EPSS 51.5%8.0 High
- open-emr openemr, openemr openemr/openemr +1 moreAccounting User Can Download Patient Reports in openemr in openemr/openemrCVE-2022-11776.5 Medium
- Show moreLoading…