Vulnerabilities (CVE)

Filtered by vendor Open-emr Subscribe
Filtered by product Openemr
Total 129 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-4503 1 Open-emr 1 Openemr 2024-11-21 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.0.2.
CVE-2022-4502 1 Open-emr 1 Openemr 2024-11-21 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2.
CVE-2022-2824 1 Open-emr 1 Openemr 2024-11-21 N/A 8.8 HIGH
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2734 1 Open-emr 1 Openemr 2024-11-21 N/A 5.4 MEDIUM
Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2733 1 Open-emr 1 Openemr 2024-11-21 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2732 1 Open-emr 1 Openemr 2024-11-21 N/A 8.3 HIGH
Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2731 1 Open-emr 1 Openemr 2024-11-21 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2730 1 Open-emr 1 Openemr 2024-11-21 N/A 6.5 MEDIUM
Authorization Bypass Through User-Controlled Key in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2729 1 Open-emr 1 Openemr 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - DOM in GitHub repository openemr/openemr prior to 7.0.0.1.
CVE-2022-2494 1 Open-emr 1 Openemr 2024-11-21 N/A 5.4 MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.
CVE-2022-2493 1 Open-emr 1 Openemr 2024-11-21 N/A 8.1 HIGH
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0.
CVE-2022-25471 1 Open-emr 1 Openemr 2024-11-21 5.5 MEDIUM 8.1 HIGH
An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zend_modules/public/Installer/register.
CVE-2022-25041 1 Open-emr 1 Openemr 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
OpenEMR v6.0.0 was discovered to contain an incorrect access control issue.
CVE-2022-24643 1 Open-emr 1 Openemr 2024-11-21 3.5 LOW 5.4 MEDIUM
A stored cross-site scripting (XSS) issue was discovered in the OpenEMR Hospital Information Management System version 6.0.0.
CVE-2022-1461 1 Open-emr 1 Openemr 2024-11-21 4.0 MEDIUM 6.5 MEDIUM
Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1.
CVE-2022-1459 1 Open-emr 1 Openemr 2024-11-21 5.5 MEDIUM 8.3 HIGH
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1.
CVE-2022-1458 1 Open-emr 1 Openemr 2024-11-21 3.5 LOW 5.4 MEDIUM
Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1.
CVE-2022-1181 1 Open-emr 1 Openemr 2024-11-21 3.5 LOW 5.4 MEDIUM
Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2.
CVE-2022-1180 1 Open-emr 1 Openemr 2024-11-21 3.5 LOW 3.5 LOW
Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.
CVE-2022-1179 1 Open-emr 1 Openemr 2024-11-21 3.5 LOW 5.4 MEDIUM
Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.