Skip to contentOpenemr vulnerabilities
Newest
- open-emr openemrOpenEMR may expose Contents of Clinical Notes and Care Planto users who do not have Sensitivities=high privilegeCVE-2025-543737.1 High
- open-emr openemrOpemEMR Vulnerable to Stored XSS Attack in the Additional Address Section of Patient DemographicsCVE-2025-43860EPSS 15.0%7.6 High
- open-emr openemrOpenEMR doesn't log password administration properlyCVE-2025-329675.4 Medium
- open-emr openemrOpenEMR Stored XSS via Patient Name Field in Procedure OrdersCVE-2025-32794EPSS 10.5%7.6 High
- open-emr openemrOpenEMR allows XSS in Patient Image featureCVE-2025-31121EPSS 17.3%7.0 High
- open-emr openemrOpenEMR Out-of-Band Server-Side Request Forgery (OOB SSRF) VulnerabilityCVE-2025-311176.9 Medium
- open-emr openemrOpenEMR Stored XSS in OpenEMR Bronchitis FormCVE-2025-30161EPSS 10.9%8.4 High
- open-emr openemrOpenEMR Reflected XSS in AJAX ScriptCVE-2025-301496.4 Medium
- open-emr openemrOpenEMR allows Reflected XSS in CAMOS new.phpCVE-2025-297727.2 High
- open-emr openemrOpenEMR Has Directory Traversal in Load Code featureCVE-2025-297894.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreStored XSS in openemr/openemrCVE-2024-08758.1 High
- open-emr openemrAn issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST...CVE-2024-377349.8 Critical
- open-emr openemr, openemr openemr/openemr +1 moreImproper Authorization in openemr/openemrCVE-2023-29506.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2023-29498.3 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Generic in openemr/openemrCVE-2023-2948EPSS 96.7%8.3 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2023-2947EPSS 90.4%4.7 Medium
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2023-29466.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreMissing Authorization in openemr/openemrCVE-2023-29454.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2023-29446.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCode Injection in openemr/openemrCVE-2023-29434.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreImproper Input Validation in openemr/openemrCVE-2023-29428.1 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2023-26748.8 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2023-25667.5 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2022-47336.7 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-46158.3 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemrCVE-2022-45678.1 High
- open-emr openemr, openemr openemr/openemr +1 moreUnrestricted Upload of File with Dangerous Type in openemr/openemrCVE-2022-45067.6 High
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemrCVE-2022-45058.8 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Input Validation in openemr/openemrCVE-2022-45047.1 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Generic in openemr/openemrCVE-2022-45036.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-45027.3 High
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemrCVE-2022-28248.8 High
- open-emr openemr, openemr openemr/openemr +1 moreImproper Restriction of Rendered UI Layers or Frames in openemr/openemrCVE-2022-273410.0 Critical
- open-emr openemr, openemr openemr/openemr +1 moreMissing Authorization in openemr/openemrCVE-2022-27328.3 High
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-2733EPSS 95.9%9.6 Critical
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Reflected in openemr/openemrCVE-2022-27315.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - DOM in openemr/openemrCVE-2022-27295.4 Medium
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemrCVE-2022-27306.5 Medium
- open-emr openemr, openemr openemr/openemr +1 moreCross-site Scripting (XSS) - Stored in openemr/openemrCVE-2022-24946.3 Medium
- open-emr openemr, openemr openemr/openemr +1 moreData Access from Outside Expected Data Manager Component in openemr/openemrCVE-2022-24938.3 High
- open-emr openemr, openemr openemr/openemr +1 moreNon Privilege User can Enable or Disable Registered in openemr/openemrCVE-2022-14618.1 High
- open-emr openemr, openemr openemr/openemr +1 moreNon-Privilege User Can View Patient’s Disclosures in openemr/openemrCVE-2022-14598.3 High
- open-emr openemr, openemr openemr/openemr +1 moreStored XSS Leads To Session Hijacking in openemr/openemrCVE-2022-14587.3 High
- phpgacl, open-emr openemr +1 moreMultiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request...CVE-2020-135678.8 High
- open-emr openemr, openemr openemr/openemr +1 moreNon-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemrCVE-2022-1179EPSS 76.9%4.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreReflected Cross Site Scripting in openemr/openemrCVE-2022-11804.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreStored Cross Site Scripting in openemr/openemrCVE-2022-1181EPSS 51.5%8.0 High
- open-emr openemr, openemr openemr/openemr +1 moreAccounting User Can Download Patient Reports in openemr in openemr/openemrCVE-2022-11776.5 Medium
- open-emr openemr, openemr openemr/openemr +1 moreStored Cross Site Scripting in openemr/openemrCVE-2022-1178EPSS 51.6%7.3 High
- openemrinterface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute...CVE-2012-0992Public exploit8.5 High
- Show moreLoading…