Skip to content
OpenAdvisories

Vendor

openmrs

14 known vulnerabilities.

Products

openmrs-core 4 Admin UI Module 3 openmrs-module-referenceapplication 2 Appointment Scheduling Module 2 HTML Form Entry UI Framework Integration Module 1 openmrs-module-fhir2 1 org.openmrs.module:legacyui-api 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 3.5
    CVE-2020-36636

    OpenMRS Admin UI Module Account Setup AccountPageController.java sendErrorMessage cross site scripting

    A vulnerability classified as problematic has been found in OpenMRS Admin UI Module up to 1.4.x. Affected is the function sendErrorMessage of the file omod/src/main/java/org/openmrs/module/adminui/page/controller/systemadmin/accounts/AccountPageController.jav…

    openmrs Admin UI Module
  • Low 3.5
    CVE-2021-4292

    OpenMRS Admin UI Module Manage Privilege Page privilege.gsp cross site scripting

    A vulnerability was found in OpenMRS Admin UI Module up to 1.4.x. It has been rated as problematic. This issue affects some unknown processing of the file omod/src/main/webapp/pages/metadata/privileges/privilege.gsp of the component Manage Privilege Page. The…

    openmrs Admin UI Module
  • Low 3.5
    CVE-2021-4291

    OpenMRS Admin UI Module location.gsp cross site scripting

    A vulnerability was found in OpenMRS Admin UI Module up to 1.5.x. It has been declared as problematic. This vulnerability affects unknown code of the file omod/src/main/webapp/pages/metadata/locations/location.gsp. The manipulation leads to cross site scripti…

    openmrs Admin UI Module
  • Low 3.5
    CVE-2020-36635

    OpenMRS Appointment Scheduling Module AppointmentTypeValidator.java validateFieldName cross site scripting

    A vulnerability was found in OpenMRS Appointment Scheduling Module up to 1.12.x. It has been classified as problematic. This affects the function validateFieldName of the file api/src/main/java/org/openmrs/module/appointmentscheduling/validator/AppointmentTyp…

    openmrs Appointment Scheduling Module
  • Low 3.5
    CVE-2021-4289

    OpenMRS openmrs-module-referenceapplication User App Page UserAppPageController.java post cross site scripting

    A vulnerability classified as problematic was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. Affected by this vulnerability is the function post of the file omod/src/main/java/org/openmrs/module/referenceapplication/page/controller/UserApp…

    openmrs openmrs-module-referenceapplication
  • Low 3.5
    CVE-2021-4288

    OpenMRS openmrs-module-referenceapplication userApp.gsp cross site scripting

    A vulnerability was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. It has been rated as problematic. This issue affects some unknown processing of the file omod/src/main/webapp/pages/userApp.gsp. The manipulation leads to cross site script…

    openmrs openmrs-module-referenceapplication
  • Low 3.5
    CVE-2021-4284

    OpenMRS HTML Form Entry UI Framework Integration Module cross site scripting

    A vulnerability classified as problematic has been found in OpenMRS HTML Form Entry UI Framework Integration Module up to 1.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrad…

    openmrs HTML Form Entry UI Framework Integration Module
  • Low 3.5
    CVE-2022-4727

    OpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross site scripting

    A vulnerability, which was classified as problematic, was found in OpenMRS Appointment Scheduling Module up to 1.16.x. This affects the function getNotes of the file api/src/main/java/org/openmrs/module/appointmentscheduling/AppointmentRequest.java of the com…

    openmrs Appointment Scheduling Module