Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

221 records

Vendor: Open-Emr Component: Openemr Clear all filters
TI-2026-47765 CVE-2026-67611 · GHSA-g6r6-jr7g-hg95

OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration

Priority HIGH 72

OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by exploiting the exposed OAuth2 password grant flow through an…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00785 Published 2026-08-03 No fix listed CWE-308
TI-2026-28796 CVE-2026-39932 · GHSA-pj78-c8jq-8xhf

OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection

Priority HIGH 76

OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes/Tree.class.php) that allows authenticated administrators to execute arbitrary operating system…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02002 Published 2026-08-03 No fix listed CWE-95
TI-2026-28795 CVE-2026-39931 · GHSA-v687-rxcc-g864

OpenEMR Authenticated SQL Injection via backup.php Import Feature

Priority HIGH 72

OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows administrators with admin or super ACL privileges to execute arbitrary DDL and DML statem…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00636 Published 2026-08-03 No fix listed CWE-434
TI-2023-30621 CVE-2023-54347 · GHSA-78v5-jfg9-88wq

OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass

Priority HIGH 77

OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00537 Published 2026-05-05 No fix listed CWE-307
TI-2026-26376 CVE-2026-34051

OpenEMR has Improper ACL On Import/Export Popup

Priority MEDIUM 58

OpenEMR is a free and open source electronic health records and medical practice management application.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00223 Published 2026-03-25 Fixed in 8.0.0.3 CWE-285
TI-2026-26275 CVE-2026-33917

OpenEMR has SQL Injection in CAMOS Form

Priority HIGH 73

OpenEMR is a free and open source electronic health records and medical practice management application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00453 Published 2026-03-25 Fixed in 8.0.0.3 CWE-89
TI-2026-24657 CVE-2026-32120

OpenEMR has IDOR in Fee Sheet Product Save

Priority MEDIUM 62

OpenEMR is a free and open source electronic health records and medical practice management application.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00264 Published 2026-03-25 Fixed in 8.0.0.3 CWE-639
Load more