Login Request a demo
OP
Product
Openmrs
by Openmrs · last CVE May 6, 2026
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 3High 4Medium 9Low 0
Severity
All severities19Critical3High4Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Openmrs to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40076
8.8
1%
May 6
OpenMRS Core arbitrary file write and code execution via Zip Slip in module upload
Affected: through 2.7.8; 2.8.0 through 2.8.5
CVE-2025-25928
8.0
0%
Mar 11
A Cross-Site Request Forgery (CSRF) in the component /admin/users/user.form of Openmrs 2.4.3 Build 0ff0ed allows attackers to execute arbitrary operations via a crafted request
Affected: 2.4.3
CVE-2026-40075
7.5
1%
May 5
OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet
Affected: through 2.7.8; 2.8.0 through 2.8.5
CVE-2022-23612
7.5
2%
Feb 22
OpenMRS is a patient-based medical record system focusing on giving providers a free customizable electronic medical record system
Affected: 1.6 before 2.1.5; 2.2.0 before 2.2.1; 2.3.0 before 2.3.5; 2.4.0 before 2.4.5; 2.5.0 before 2.5.3
Showing 4