Read the docs

Eclinicalworks

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Eclinicalworks records in CISA KEV

No Eclinicalworks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Patient Portal 4 records MEDIUM Population Health 4 records MEDIUM

Records

8 records

TI-2015-03843 CVE-2015-4593 · GHSA-cxmr-mq4f-hj5f

eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF)…

Priority MEDIUM 44

eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for req…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03355 Published 2017-01-10 No fix listed CWE-352
TI-2015-03842 CVE-2015-4592 · GHSA-p7jm-8wv3-w2jw

eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in…

Priority MEDIUM 44

eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03346 Published 2017-01-10 No fix listed CWE-89
Open these records in search →