eclinicalworks kayıtları
eclinicalworks üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-284 Improper Access Control1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2015-4594Kavram kanıtı | eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability.eclinicalworks · population health · CWE-284 | Kritik9,8 | — | %6,2 | 10 Oca 2017 |
40Planlayın | CVE-2017-5569İstismar yok | An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13.eclinicalworks · patient portal · CWE-89 | Kritik9,8 | — | %1,9 | 23 Oca 2017 |
36İzleyin | CVE-2015-4593Kavram kanıtı | eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allowseclinicalworks · population health · CWE-352 | Yüksek8,8 | — | %3,3 | 10 Oca 2017 |
36İzleyin | CVE-2015-4592Kavram kanıtı | eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticateclinicalworks · population health · CWE-89 | Yüksek8,8 | — | %3,3 | 10 Oca 2017 |
35İzleyin | CVE-2017-5570İstismar yok | An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13.eclinicalworks · patient portal · CWE-89 | Yüksek8,8 | — | %1,2 | 23 Oca 2017 |
30İzleyin | CVE-2017-5598İstismar yok | An issue was discovered in eClinicalWorks healow@work 8.0 build 8.eclinicalworks · patient portal · CWE-89 | Yüksek7,5 | — | %1,1 | 27 Oca 2017 |
26İzleyin | CVE-2015-4591Kavram kanıtı | eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated ueclinicalworks · population health · CWE-79 | Orta6,1 | — | %5,1 | 10 Oca 2017 |
24İzleyin | CVE-2017-5599İstismar yok | An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13.eclinicalworks · patient portal · CWE-79 | Orta6,1 | — | %0,6 | 27 Oca 2017 |
- CVE-2015-459441Planlayın
eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability.
KritikCVSS 9,8Kavram kanıtıEPSS %6eclinicalworks · population health10 Oca 2017
- CVE-2017-556940Planlayın
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13.
KritikCVSS 9,8İstismar yokEPSS %1eclinicalworks · patient portal23 Oca 2017
- CVE-2015-459336İzleyin
eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows
YüksekCVSS 8,8Kavram kanıtıEPSS %3eclinicalworks · population health10 Oca 2017
- CVE-2015-459236İzleyin
eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticat
YüksekCVSS 8,8Kavram kanıtıEPSS %3eclinicalworks · population health10 Oca 2017
- CVE-2017-557035İzleyin
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13.
YüksekCVSS 8,8İstismar yokEPSS %1eclinicalworks · patient portal23 Oca 2017
- CVE-2017-559830İzleyin
An issue was discovered in eClinicalWorks healow@work 8.0 build 8.
YüksekCVSS 7,5İstismar yokEPSS %1eclinicalworks · patient portal27 Oca 2017
- CVE-2015-459126İzleyin
eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated u
OrtaCVSS 6,1Kavram kanıtıEPSS %5eclinicalworks · population health10 Oca 2017
- CVE-2017-559924İzleyin
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13.
OrtaCVSS 6,1İstismar yokEPSS %0eclinicalworks · patient portal27 Oca 2017