Skip to content
OpenAdvisories

Vendor

Bahmni

3 known vulnerabilities.

Products

bahmni-core 2 bahmnicore 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-63194

    Bahmni-Core: Path traversal may lead to arbitrary file write in the admin CSV import

    OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients). In version 0.93, there is insufficient validation of input paths during the admin CSV import process, allowing for potential arbitrary file write. Thi…

    Bahmni bahmni-core
  • High 7.1
    CVE-2026-63192

    Bahmni-Core: Exfiltration of patient data stored in Bahmni through SQL injection through boolean blind and error based exfil

    OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients). In version 0.93, an attacker with authenticated access could potentially exfiltrate sensitive data from the database. This issue has been patched in v…

    Bahmni bahmni-core