Openemr vulnerabilities
192 CVEs and advisories name Openemr as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-2730Authorization Bypass Through User-Controlled Key in openemr/openemr
- CVE-2022-2494Cross-site Scripting (XSS) - Stored in openemr/openemr
- CVE-2022-2493Data Access from Outside Expected Data Manager Component in openemr/openemr
- CVE-2022-1461Non Privilege User can Enable or Disable Registered in openemr/openemr
- CVE-2022-1459Non-Privilege User Can View Patient’s Disclosures in openemr/openemr
- CVE-2022-1458Stored XSS Leads To Session Hijacking in openemr/openemr
- CVE-2020-13567Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7.
- CVE-2022-1179Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr
- CVE-2022-1180Reflected Cross Site Scripting in openemr/openemr
- CVE-2022-1181Stored Cross Site Scripting in openemr/openemr
- CVE-2022-1177Accounting User Can Download Patient Reports in openemr in openemr/openemr
- CVE-2022-1178Stored Cross Site Scripting in openemr/openemr