OpenMRS

Records34All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

OpenMRS records in CISA KEV

No OpenMRS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openmrs 19 records CRITICAL Reference Application 4 records MEDIUM Admin Ui Module 3 records LOW Appointment Scheduling Module 2 records LOW Html Form Entry 1 record MEDIUM Htmlformentry 1 record MEDIUM Htmlformentryui 1 record LOW Openmrs-module-htmlformentry 1 record MEDIUM

Records

1 record in Html Form Entry · all components

TI-2018-11851 CVE-2018-16521 · GHSA-pfpg-h57h-cgrj

An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as…

MEDIUM 46

An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01916 Published 2018-09-05 No fix listed CWE-611

Open these records in search →