OP
Product
openemr/openemr
18
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 13Low 0
Watch
Add openemr/openemr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2730 | 6.5 | Aug 9 | Authorization Bypass Through User-Controlled Key in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2023-2948 | 6.1 | May 28 | Cross-site Scripting (XSS) - Generic in openemr/openemr Affected: before 7.0.1 |
| CVE-2023-2949 | 6.1 | May 28 | Cross-site Scripting (XSS) - Reflected in openemr/openemr Affected: before 7.0.1 |
| CVE-2022-2733 | 6.1 | Aug 9 | Cross-site Scripting (XSS) - Reflected in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2022-2731 | 6.1 | Aug 9 | Cross-site Scripting (XSS) - Reflected in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2023-2944 | 5.4 | May 27 | Improper Access Control in openemr/openemr Affected: before 7.0.1 |
| CVE-2023-2945 | 5.4 | May 27 | Missing Authorization in openemr/openemr Affected: before 7.0.1 |
| CVE-2022-2734 | 5.4 | Aug 9 | Improper Restriction of Rendered UI Layers or Frames in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2022-2729 | 5.4 | Aug 9 | Cross-site Scripting (XSS) - DOM in openemr/openemr Affected: before 7.0.0.1 |
| CVE-2024-0875 | 4.8 | Nov 15 | Stored XSS in openemr/openemr Affected: before 7.0.2.1 |
| CVE-2023-2947 | 4.8 | May 27 | Cross-site Scripting (XSS) - Stored in openemr/openemr Affected: before 7.0.1 |
| CVE-2023-2566 | 4.8 | May 8 | Cross-site Scripting (XSS) - Stored in openemr/openemr Affected: before 7.0.1 |
| CVE-2023-2674 | 4.3 | May 12 | Improper Access Control in openemr/openemr Affected: before 7.0.1 |
Showing 13