Eclinicalworks
8 CVEs across 2 Eclinicalworks products. Browse Eclinicalworks vulnerabilities, severities, and proof-of-concept exploits.
Eclinicalworks products with known CVEs
Eclinicalworks CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2017-5599 | Medium | 6.1 | 2017-01-27 | An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a reflected Cross Site Scripting vulnerability which affects the raceMasterList… |
CVE-2017-5598 | High | 7.5 | 2017-01-27 | An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un… |
CVE-2017-5570 | High | 8.8 | 2017-01-23 | An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the messageJson.jsp, which can only be exploited by… |
CVE-2017-5569 | Critical | 9.8 | 2017-01-23 | An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the template.jsp, which can be exploited without th… |
CVE-2015-4594 | Critical | 9.8 | 2017-01-10 | eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the application does not assign a new sessio… |
CVE-2015-4593 | High | 8.8 | 2017-01-10 | eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote attackers t… |
CVE-2015-4592 | High | 8.8 | 2017-01-10 | eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject… |
CVE-2015-4591 | Medium | 6.1 | 2017-01-10 | eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to inject arbi… |