İçeriğe atla
Noroxi

Open-Emr kayıtları

open-emr üreticisine ait 221 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %0,9
Pre-auth RCE
11
Düzeltme kaydı olan
%9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

221 kayıt
  • CVE-2018-17179
    60Bu hafta

    An issue was discovered in OpenEMR before 5.0.1 Patch 7.

    KritikCVSS 9,8SilahlaştırılmışEPSS %12

    open-emr · openemr17 May 2019

  • CVE-2020-19364
    56Planlayın

    OpenEMR 5.0.1 allows an authenticated attacker to upload and execute malicious PHP scripts through /controller.php.

    YüksekCVSS 8,8İstismar yokEPSS %70

    open-emr · openemr19 Oca 2021

  • CVE-2019-14530
    55Planlayın

    An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter.

    YüksekCVSS 8,8Kavram kanıtıEPSS %65

    open-emr · openemr13 Ağu 2019

  • CVE-2020-36243
    54Planlayın

    The Patient Portal of OpenEMR 5.0.2.1 is affected by a Command Injection vulnerability in /interface/main/backup.php.

    YüksekCVSS 8,8İstismar yokEPSS %64

    open-emr · openemr7 Şub 2021

  • CVE-2023-2948
    53Planlayın

    Cross-site Scripting (XSS) - Generic in openemr/openemr

    OrtaCVSS 6,1Kavram kanıtıEPSS %96

    open-emr · openemr28 May 2023

  • CVE-2022-2733
    53Planlayın

    Cross-site Scripting (XSS) - Reflected in openemr/openemr

    OrtaCVSS 6,1Kavram kanıtıEPSS %95

    open-emr · openemr9 Ağu 2022

  • CVE-2018-15153
    53Planlayın

    OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by

    YüksekCVSS 8,8İstismar yokEPSS %61

    open-emr · openemr15 Ağu 2018

  • CVE-2021-25921
    48Planlayın

    In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly i

    OrtaCVSS 5,4İstismar yokEPSS %91

    open-emr · openemr22 Mar 2021

  • CVE-2020-13562
    47Planlayın

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

    OrtaCVSS 6,1İstismar yokEPSS %77

    phpgacl project · phpgacl1 Şub 2021

  • CVE-2020-13564
    47Planlayın

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

    OrtaCVSS 6,1İstismar yokEPSS %75

    phpgacl project · phpgacl1 Şub 2021

  • CVE-2020-13563
    47Planlayın

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7.

    OrtaCVSS 6,1İstismar yokEPSS %75

    phpgacl project · phpgacl1 Şub 2021

  • CVE-2019-14529
    47Planlayın

    OpenEMR before 5.0.2 allows SQL Injection in interface/forms/eye_mag/save.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %28

    open-emr · openemr2 Ağu 2019

  • CVE-2023-2947
    46Planlayın

    Cross-site Scripting (XSS) - Stored in openemr/openemr

    OrtaCVSS 4,8İstismar yokEPSS %90

    open-emr · openemr27 May 2023

  • CVE-2022-1179
    44Planlayın

    Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr

    OrtaCVSS 5,4İstismar yokEPSS %76

    open-emr · openemr30 Mar 2022

  • CVE-2018-9250
    44Planlayın

    interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL commands via the newlist

    YüksekCVSS 8,8İstismar yokEPSS %30

    open-emr · openemr18 May 2018

  • CVE-2020-13568
    44Planlayın

    SQL injection vulnerability exists in phpGACL 3.3.7.

    YüksekCVSS 8,8İstismar yokEPSS %29

    open-emr · openemr13 Nis 2021

  • CVE-2018-15152
    44Planlayın

    Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access

    KritikCVSS 9,1Kavram kanıtıEPSS %25

    open-emr · openemr15 Ağu 2018

  • CVE-2018-15139
    41Planlayın

    Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attack

    YüksekCVSS 8,8Kavram kanıtıEPSS %19

    open-emr · openemr13 Ağu 2018

  • CVE-2024-22611
    41Planlayın

    OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr

    KritikCVSS 9,8İstismar yokEPSS %6

    open-emr · openemr3 Nis 2025

  • CVE-2021-25919
    40Planlayın

    In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly.

    OrtaCVSS 4,8İstismar yokEPSS %69

    open-emr · openemr22 Mar 2021

  • CVE-2019-3963
    40Planlayın

    In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the patient_id parameter.

    OrtaCVSS 6,1İstismar yokEPSS %52

    open-emr · openemr20 Ağu 2019

  • CVE-2019-3964
    40Planlayın

    In OpenEMR 5.0.1 and earlier, controller.php contains a reflected XSS vulnerability in the doc_id parameter.

    OrtaCVSS 6,1İstismar yokEPSS %52

    open-emr · openemr20 Ağu 2019

  • CVE-2018-15142
    40Planlayın

    Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patien

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    open-emr · openemr13 Ağu 2018

  • CVE-2017-9380
    40Planlayın

    OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within th

    YüksekCVSS 8,8Kavram kanıtıEPSS %15

    open-emr · openemr2 Haz 2017

  • CVE-2026-24898
    40Planlayın

    OpenEMR has an Unauthenticated MedEx Token Disclosure

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    open-emr · openemr3 Mar 2026