Login Request a demo
OP
Product
Openmrs
by Openmrs · last CVE May 6, 2026
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 3High 4Medium 9Low 0
Severity
All severities19Critical3High4Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Openmrs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-43094
9.8
1%
May 10
An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via GET requests on arbitrary parameters…
Affected: through 2.4.0
CVE-2018-19276
9.8
99%
Mar 17
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via…
Affected: 1.12.0 before 1.12.1; 2.0.0 before 2.0.8; 2.1.0 before 2.1.4
CVE-2017-12796
9.8
4%
Oct 23
The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input…
Affected: before 2.6.1
Showing 3