Product by OpenEMR
Openemr/openemr
37 known vulnerabilities in Openemr/openemr (OpenEMR), 0 of them actively exploited (CISA KEV).
Key figures
37
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-2733 | Cross-site Scripting (XSS) - Reflected in openemr/openemr | 9.6 | |
| High | CVE-2023-2948 | Cross-site Scripting (XSS) - Generic in openemr/openemr | 8.3 | |
| High | CVE-2022-1181 | Stored Cross Site Scripting in openemr/openemr | 8.0 | |
| High | CVE-2022-1178 | Stored Cross Site Scripting in openemr/openemr | 7.3 | |
| Medium | CVE-2023-2947 | Cross-site Scripting (XSS) - Stored in openemr/openemr | 4.7 | |
| Medium | CVE-2022-1179 | Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr | 4.6 | |
| High | CVE-2023-2949 | Cross-site Scripting (XSS) - Reflected in openemr/openemr | 8.3 | |
| High | CVE-2022-2493 | Data Access from Outside Expected Data Manager Component in openemr/openemr | 8.3 | |
| Critical | CVE-2022-2734 | Improper Restriction of Rendered UI Layers or Frames in openemr/openemr | 10.0 | |
| High | CVE-2022-1459 | Non-Privilege User Can View Patient’s Disclosures in openemr/openemr | 8.3 | |
| High | CVE-2022-2732 | Missing Authorization in openemr/openemr | 8.3 | |
| High | CVE-2022-4506 | Unrestricted Upload of File with Dangerous Type in openemr/openemr | 7.6 | |
| High | CVE-2022-2824 | Authorization Bypass Through User-Controlled Key in openemr/openemr | 8.8 | |
| High | CVE-2022-4505 | Authorization Bypass Through User-Controlled Key in openemr/openemr | 8.8 | |
| High | CVE-2022-1461 | Non Privilege User can Enable or Disable Registered in openemr/openemr | 8.1 | |
| High | CVE-2023-2942 | Improper Input Validation in openemr/openemr | 8.1 | |
| High | CVE-2022-4504 | Improper Input Validation in openemr/openemr | 7.1 | |
| High | CVE-2023-2674 | Improper Access Control in openemr/openemr | 8.8 | |
| High | CVE-2022-4615 | Cross-site Scripting (XSS) - Reflected in openemr/openemr | 8.3 | |
| High | CVE-2022-4567 | Improper Access Control in openemr/openemr | 8.1 | |
| Medium | CVE-2022-1177 | Accounting User Can Download Patient Reports in openemr in openemr/openemr | 6.5 | |
| High | CVE-2022-4502 | Cross-site Scripting (XSS) - Reflected in openemr/openemr | 7.3 | |
| High | CVE-2022-1458 | Stored XSS Leads To Session Hijacking in openemr/openemr | 7.3 | |
| Medium | CVE-2022-2730 | Authorization Bypass Through User-Controlled Key in openemr/openemr | 6.5 | |
| High | CVE-2024-0875 | Stored XSS in openemr/openemr | 8.1 |