Skip to content
OpenAdvisories

Product · Open-Emr

openemr/openemr

37 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-2950

    Improper Authorization in openemr/openemr

    Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr
  • Medium 4.7
    CVE-2023-2947 EPSS 90%

    Cross-site Scripting (XSS) - Stored in openemr/openemr

    Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr
  • Medium 6.3
    CVE-2023-2946

    Improper Access Control in openemr/openemr

    Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr
  • Medium 4.3
    CVE-2023-2945

    Missing Authorization in openemr/openemr

    Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr
  • Medium 4.6
    CVE-2023-2943

    Code Injection in openemr/openemr

    Code Injection in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr
  • Medium 6.3
    CVE-2023-2944

    Improper Access Control in openemr/openemr

    Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr
  • Medium 6.7
    CVE-2022-4733

    Cross-site Scripting (XSS) - Stored in openemr/openemr

    Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.2.

    Open-Emr openemr/openemr
  • Medium 6.4
    CVE-2022-4503

    Cross-site Scripting (XSS) - Generic in openemr/openemr

    Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.0.2.

    Open-Emr openemr/openemr
  • Medium 5.4
    CVE-2022-2731

    Cross-site Scripting (XSS) - Reflected in openemr/openemr

    Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.

    Open-Emr openemr/openemr
  • Medium 5.4
    CVE-2022-2729

    Cross-site Scripting (XSS) - DOM in openemr/openemr

    Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1.

    Open-Emr openemr/openemr
  • Medium 6.5
    CVE-2022-2730

    Authorization Bypass Through User-Controlled Key in openemr/openemr

    Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1.

    Open-Emr openemr/openemr
  • Medium 6.3
    CVE-2022-2494

    Cross-site Scripting (XSS) - Stored in openemr/openemr

    Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.

    Open-Emr openemr/openemr
  • Medium 4.6
    CVE-2022-1179 EPSS 77%

    Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr

    Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.

    Open-Emr openemr/openemr
  • Medium 4.6
    CVE-2022-1180

    Reflected Cross Site Scripting in openemr/openemr

    Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.

    Open-Emr openemr/openemr
  • Medium 6.5
    CVE-2022-1177

    Accounting User Can Download Patient Reports in openemr in openemr/openemr

    Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0.

    Open-Emr openemr/openemr