Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Open-emr

Open-emr vulnerabilities

Products

Openemr369

Newest

Known exploitedIn KEVPublic exploitFix available

open-emr openemr, openemr openemr/openemr +1 moreStored XSS Leads To Session Hijacking in openemr/openemrCVE-2022-14587.3 HighApril 25, 2022
phpgacl, open-emr openemr +1 moreMultiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request...CVE-2020-135678.8 HighApril 18, 2022
open-emr openemr, openemr openemr/openemr +1 moreNon-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemrCVE-2022-1179EPSS 76.9%4.6 MediumMarch 30, 2022
open-emr openemr, openemr openemr/openemr +1 moreReflected Cross Site Scripting in openemr/openemrCVE-2022-11804.6 MediumMarch 30, 2022
open-emr openemr, openemr openemr/openemr +1 moreStored Cross Site Scripting in openemr/openemrCVE-2022-1181EPSS 51.5%8.0 HighMarch 30, 2022
open-emr openemr, openemr openemr/openemr +1 moreAccounting User Can Download Patient Reports in openemr in openemr/openemrCVE-2022-11776.5 MediumMarch 30, 2022
open-emr openemr, openemr openemr/openemr +1 moreStored Cross Site Scripting in openemr/openemrCVE-2022-1178EPSS 51.6%7.3 HighMarch 30, 2022
open-emr openemrA stored cross-site scripting (XSS) issue was discovered in the OpenEMR Hospital Information...CVE-2022-246435.4 MediumMarch 25, 2022
open-emr openemrOpenEMR v6.0.0 was discovered to contain an incorrect access control issue.CVE-2022-250414.3 MediumMarch 23, 2022
open-emr openemrAn Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any...CVE-2022-254718.1 HighMarch 2, 2022
open-emr openemrAn authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before...CVE-2021-41843EPSS 12.7%6.5 MediumDecember 17, 2021
open-emr openemrOpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via...CVE-2021-40352Public exploit6.5 MediumSeptember 1, 2021
open-emr openemrIn OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not...CVE-2021-259238.1 HighJune 24, 2021
open-emr openemrThe Patient Portal of OpenEMR 5.0.2.1 is affected by a incorrect access control system in portal...CVE-2021-321018.2 HighMay 7, 2021
open-emr openemrA SQL injection vulnerability exists (with user privileges) in library/custom_template/ajax_code...CVE-2021-321028.8 HighMay 7, 2021
open-emr openemrA Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1...CVE-2021-321034.8 MediumMay 7, 2021
open-emr openemrA SQL injection vulnerability exists (with user privileges) in interface/forms/eye_mag/save.php...CVE-2021-321048.8 HighMay 7, 2021
phpgacl, open-emr openemr +1 moreSQL injection vulnerability exists in phpGACL 3.3.7. A specially crafted HTTP request can lead to...CVE-2020-13568EPSS 29.7%8.8 HighApril 13, 2021
phpgacl, open-emr openemr +1 moreSQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead...CVE-2020-135668.8 HighApril 13, 2021
open-emr openemrIn OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to...CVE-2021-259226.1 MediumMarch 22, 2021
open-emr openemrIn OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to...CVE-2021-259174.8 MediumMarch 22, 2021
open-emr openemrIn OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to...CVE-2021-259184.8 MediumMarch 22, 2021
open-emr openemrIn OpenEMR, versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when creating...CVE-2021-259206.5 MediumMarch 22, 2021
open-emr openemrIn OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due...CVE-2021-25921EPSS 89.3%5.4 MediumMarch 22, 2021
open-emr openemrIn OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to...CVE-2021-25919EPSS 66.1%4.8 MediumMarch 22, 2021
open-emr openemrA SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5...CVE-2020-291437.2 HighFebruary 15, 2021
open-emr openemrA SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient...CVE-2020-291397.2 HighFebruary 15, 2021
open-emr openemrA SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0...CVE-2020-291407.2 HighFebruary 15, 2021
open-emr openemrA SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2...CVE-2020-291427.2 HighFebruary 15, 2021
open-emr openemr, phpgacl +1 moreAn open redirect vulnerability exists in the return_page redirection functionality of phpGACL 3.3...CVE-2020-135656.1 MediumFebruary 10, 2021
open-emr openemrThe Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in ...CVE-2020-36243EPSS 64.1%8.8 HighFebruary 7, 2021
phpgacl, open-emr openemr +1 moreA cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A...CVE-2020-13564EPSS 75.9%9.6 CriticalFebruary 1, 2021
phpgacl, open-emr openemr +1 moreA cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A...CVE-2020-13563EPSS 75.9%9.6 CriticalFebruary 1, 2021
phpgacl, open-emr openemr +1 moreA cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A...CVE-2020-13562EPSS 77.7%9.6 CriticalFebruary 1, 2021
open-emr openemrA cross-site request forgery vulnerability exists in the GACL functionality of OpenEMR 5.0.2 and...CVE-2020-135698.8 HighJanuary 28, 2021
open-emr openemrOpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts...CVE-2020-19364EPSS 70.6%8.8 HighJanuary 20, 2021
open-emr openemrOpenEMR 5.0.1.3 allows Cross-Site Request Forgery (CSRF) via library/ajax and interface/super, as...CVE-2018-167958.8 HighDecember 31, 2020
open-emr openemrAuthenticated SQL Injection in interface/forms/eye_mag/js/eye_base.php in OpenEMR through 5.0.2...CVE-2019-164048.8 HighOctober 21, 2019
open-emr openemrReflected XSS in interface/forms/eye_mag/view.php in OpenEMR 5.x before 5.0.2.1 allows a remote...CVE-2019-168626.1 MediumOctober 21, 2019
open-emr openemrReflected XSS exists in interface/forms/eye_mag/view.php in OpenEMR 5.x before 5.0.2.1 ia the id...CVE-2019-174096.1 MediumOctober 21, 2019
open-emr openemrOpenEMR through 5.0.2 has SQL Injection in the Lifestyle demographic filter criteria in library...CVE-2019-171979.8 CriticalOctober 5, 2019
open-emr openemrXSS in library/custom_template/add_template.php in OpenEMR through 5.0.2 allows a malicious user...CVE-2019-171796.1 MediumOctober 4, 2019
open-emr openemrOpenEMR v5.0.1-6 allows XSS.CVE-2019-8368EPSS 45.9%6.1 MediumSeptember 16, 2019
open-emr openemrOpenEMR v5.0.1-6 allows code execution.CVE-2019-83717.2 HighSeptember 16, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the...CVE-2019-39688.8 HighAugust 20, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal...CVE-2019-3967EPSS 29.5%6.5 MediumAugust 20, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the...CVE-2019-39666.1 MediumAugust 20, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the...CVE-2019-39656.1 MediumAugust 20, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc_id...CVE-2019-3964EPSS 52.7%6.1 MediumAugust 20, 2019
open-emr openemrIn OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the...CVE-2019-3963EPSS 52.7%6.1 MediumAugust 20, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open