Openemr
Page 2 of 2 — Openemr CVEs from a corpus of 132, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4733 | Medium | 4.8 | 2022-12-27 | Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-4615 | Medium | 6.1 | 2022-12-19 | Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-4567 | High | 8.1 | 2022-12-17 | Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-4506 | High | 8.8 | 2022-12-15 | Unrestricted Upload of File with Dangerous Type in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-4505 | High | 8.8 | 2022-12-15 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-4504 | High | 7.5 | 2022-12-15 | Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-4503 | Medium | 6.1 | 2022-12-15 | Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-4502 | Medium | 6.1 | 2022-12-15 | Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2. |
CVE-2022-2824 | High | 8.8 | 2022-08-15 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2734 | Medium | 5.4 | 2022-08-09 | Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2733 | Medium | 6.1 | 2022-08-09 | Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2732 | High | 8.3 | 2022-08-09 | Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2731 | Medium | 6.1 | 2022-08-09 | Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2730 | Medium | 6.5 | 2022-08-09 | Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2729 | Medium | 5.4 | 2022-08-09 | Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1. |
CVE-2022-2494 | Medium | 5.4 | 2022-07-22 | Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0. |
CVE-2022-2493 | High | 8.1 | 2022-07-22 | Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0. |
CVE-2022-1461 | Medium | 6.5 | 2022-04-25 | Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1. |
CVE-2022-1459 | High | 8.3 | 2022-04-25 | Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1. |
CVE-2022-1458 | Medium | 5.4 | 2022-04-25 | Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1. |
CVE-2020-13567 | Critical | 9.8 | 2022-04-18 | Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP reque… |
CVE-2022-1181 | Medium | 5.4 | 2022-03-30 | Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2. |
CVE-2022-1180 | Low | 3.5 | 2022-03-30 | Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4. |
CVE-2022-1179 | Medium | 5.4 | 2022-03-30 | Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4. |
CVE-2022-1178 | Medium | 5.4 | 2022-03-30 | Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4. |
CVE-2022-1177 | Medium | 4.3 | 2022-03-30 | Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0. |
CVE-2012-0992 | | 2012-02-07 | interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter. | |
CVE-2012-0991 | | 2012-02-07 | Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname param… | |
CVE-2007-0649 | | 2007-02-01 | Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and con… | |
CVE-2006-5811 | | 2006-11-08 | PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled, allows remote attackers to execute arbi… | |
CVE-2006-5795 | | 2006-11-08 | Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary… | |
CVE-2006-2929 | | 2006-06-09 | PHP remote file inclusion vulnerability in contrib/forms/evaluation/C_FormEvaluation.class.php in OpenEMR 2.8.1 and earlier, when register_globals is enabled… |