Vendors / OpenMRS Records 34 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 7
CVSS high 7
Exploited now OpenMRS records in CISA KEV No OpenMRS vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01916 · Published 2018-09-05 · No fix listed CWE-611
Priority MEDIUM 45
An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via GET requests on arbitrary parameters in patient.page.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01278 · Published 2022-05-10 · No fix listed CWE-89
Priority LOW 29
A vulnerability classified as problematic was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01036 · Published 2022-12-27 · No fix listed CWE-79
Priority LOW 29
A vulnerability was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00982 · Published 2022-12-27 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
7 7 20 0 0
THREATIST.IORead the docs