Skip to contentOpenemr Openemr/openemr vulnerabilities
- open-emr openemr, openemr openemr/openemr +1 moreStored XSS in openemr/openemrCVE-2024-08758.1 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Authorization in openemr/openemrCVE-2023-29506.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2023-29498.3 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Generic in openemr/openemrCVE-2023-2948EPSS 96.7%8.3 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2023-2947EPSS 90.4%4.7 Medium
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2023-29466.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreMissing Authorization in openemr/openemrCVE-2023-29454.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2023-29446.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCode Injection in openemr/openemrCVE-2023-29434.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreImproper Input Validation in openemr/openemrCVE-2023-29428.1 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2023-26748.8 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2023-25667.5 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2022-47336.7 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-46158.3 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2022-45678.1 High
- open-emr openemr, openemr openemr/openemr +1 moreUnrestricted Upload of File with Dangerous Type in openemr/openemrCVE-2022-45067.6 High
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemrCVE-2022-45058.8 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Input Validation in openemr/openemrCVE-2022-45047.1 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Generic in openemr/openemrCVE-2022-45036.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-45027.3 High
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemrCVE-2022-28248.8 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Restriction of Rendered UI Layers or Frames in openemr/openemrCVE-2022-273410.0 Critical
- open-emr openemr, openemr openemr/openemr +1 moreMissing Authorization in openemr/openemrCVE-2022-27328.3 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-2733EPSS 95.9%9.6 Critical
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-27315.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - DOM in openemr/openemrCVE-2022-27295.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemrCVE-2022-27306.5 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2022-24946.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreData Access from Outside Expected Data Manager Component in openemr/openemrCVE-2022-24938.3 High
- open-emr openemr, openemr openemr/openemr +1 moreNon Privilege User can Enable or Disable Registered in openemr/openemrCVE-2022-14618.1 High
- open-emr openemr, openemr openemr/openemr +1 moreNon-Privilege User Can View Patient’s Disclosures in openemr/openemrCVE-2022-14598.3 High
- open-emr openemr, openemr openemr/openemr +1 moreStored XSS Leads To Session Hijacking in openemr/openemrCVE-2022-14587.3 High
- open-emr openemr, openemr openemr/openemr +1 moreNon-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemrCVE-2022-1179EPSS 76.9%4.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreReflected Cross Site Scripting in openemr/openemrCVE-2022-11804.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreStored Cross Site Scripting in openemr/openemrCVE-2022-1181EPSS 51.5%8.0 High
- open-emr openemr, openemr openemr/openemr +1 moreAccounting User Can Download Patient Reports in openemr in openemr/openemrCVE-2022-11776.5 Medium
- open-emr openemr, openemr openemr/openemr +1 moreStored Cross Site Scripting in openemr/openemrCVE-2022-1178EPSS 51.6%7.3 High