Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 369

Export CSV
CVE-2023-2948

Cross-site Scripting (XSS) - Generic in openemr/openemr

Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1 · 6.1 Medium EPSS 96.7% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2023-2949

Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2023-2950

Improper Authorization in openemr/openemr

Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-2734

Improper Restriction of Rendered UI Layers or Frames in openemr/openemr

Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-2733

Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.

CVSS 3.1 · 6.1 Medium EPSS 95.9% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-2731

Cross-site Scripting (XSS) - Reflected in openemr/openemr

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-2730

Authorization Bypass Through User-Controlled Key in openemr/openemr

Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-2729

Cross-site Scripting (XSS) - DOM in openemr/openemr

Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-2494

Cross-site Scripting (XSS) - Stored in openemr/openemr

Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-2493

Data Access from Outside Expected Data Manager Component in openemr/openemr

Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0.

CVSS 3.1 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-25471

An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zend_modules/public/Installer/register.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-25041

OpenEMR v6.0.0 was discovered to contain an incorrect access control issue.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-24643

A stored cross-site scripting (XSS) issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0.

CVSS 3.1 · 5.4 Medium EPSS 1.2% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-1461

Non Privilege User can Enable or Disable Registered in openemr/openemr

Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-1459

Non-Privilege User Can View Patient’s Disclosures in openemr/openemr

Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1.

CVSS 3.1 · 8.3 High EPSS 1.1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-1458

Stored XSS Leads To Session Hijacking in openemr/openemr

Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-1181

Stored Cross Site Scripting in openemr/openemr

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2.

CVSS 3.1 · 5.4 Medium EPSS 51.5% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-1180

Reflected Cross Site Scripting in openemr/openemr

Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-1179

Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr

Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.

CVSS 3.1 · 5.4 Medium EPSS 76.9% KEV · Not listed
Vendors
Open-emr
Products
Openemr
CVE-2022-1178

Stored Cross Site Scripting in openemr/openemr

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.

CVSS 3.1 · 5.4 Medium EPSS 51.6% KEV · Not listed
Vendors
Open-emr
Products
Openemr