Vulnerabilities

TI-2021-03147 CVE-2021-4289 · GHSA-36m9-prc4-gjq2

OpenMRS openmrs-module-referenceapplication User App Page UserAppPageController.java post cross site scripting

LOW 29

A vulnerability classified as problematic was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01036 Published 2022-12-27 No fix listed CWE-79

TI-2021-03146 CVE-2021-4288 · GHSA-qc24-vqq2-gjjw

OpenMRS openmrs-module-referenceapplication userApp.gsp cross site scripting

LOW 29

A vulnerability was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00982 Published 2022-12-27 No fix listed CWE-79

TI-2021-19148 CVE-2021-43094 · GHSA-8745-257h-qrqp

An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition…

MEDIUM 45

An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via GET requests on arbitrary parameters in patient.page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01278 Published 2022-05-10 No fix listed CWE-89

TI-2018-11851 CVE-2018-16521 · GHSA-pfpg-h57h-cgrj

An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as…

MEDIUM 46

An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01916 Published 2018-09-05 No fix listed CWE-611

Vulnerabilities

Filters

OpenMRS openmrs-module-referenceapplication User App Page UserAppPageController.java post cross site scripting

OpenMRS openmrs-module-referenceapplication userApp.gsp cross site scripting

An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition…

An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as…