Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

37 records

Vendor: Openclinic Ga Project Clear all filters
TI-2020-16572 CVE-2020-27246 · GHSA-qgpp-26ch-wf83

SQL injection in OpenClinic GA

Priority MEDIUM 40

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00806 Published 2021-05-11 No fix listed CWE-89
TI-2020-16571 CVE-2020-27245 · GHSA-vpgm-r2pm-mcv7

SQL injection in OpenClinic GA

Priority MEDIUM 40

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00806 Published 2021-05-11 No fix listed CWE-89
TI-2020-16570 CVE-2020-27244 · GHSA-gfh5-jm3w-g7pr

SQL injection in OpenClinic GA

Priority MEDIUM 40

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00806 Published 2021-05-11 No fix listed CWE-89
TI-2020-16569 CVE-2020-27243 · GHSA-72gc-h382-hxp3

SQL injection in OpenClinic GA

Priority MEDIUM 40

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00806 Published 2021-05-11 No fix listed CWE-89
TI-2020-16568 CVE-2020-27242 · GHSA-6f2p-wvf8-2ppf

SQL injection in OpenClinic GA

Priority MEDIUM 40

An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00806 Published 2021-05-11 No fix listed CWE-89
TI-2020-16558 CVE-2020-27232 · GHSA-29jr-72j5-7p98

SQL injection in OpenClinic GA

Priority MEDIUM 40

An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01037 Published 2021-05-10 No fix listed CWE-89
TI-2020-16552 CVE-2020-27226 · GHSA-5r4w-r2x6-xx68

SQL injection in OpenClinic

Priority MEDIUM 40

An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01037 Published 2021-05-10 No fix listed CWE-89
TI-2020-16557 CVE-2020-27231 · GHSA-x5gp-5p79-9xh8

SQL injection in OpenClinic GA

Priority MEDIUM 40

A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00806 Published 2021-05-10 No fix listed CWE-89
TI-2020-16556 CVE-2020-27230 · GHSA-6ccm-56qr-vvvv

SQL injection in OpenClinic GA

Priority MEDIUM 40

A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00806 Published 2021-05-10 No fix listed CWE-89
TI-2020-16555 CVE-2020-27229 · GHSA-w39c-mmc3-2472

SQL injection in OpenClinic GA

Priority MEDIUM 40

A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00806 Published 2021-05-10 No fix listed CWE-89
TI-2020-16567 CVE-2020-27241 · GHSA-38mm-h2h2-77mm

SQL injection in OpenClinic

Priority MEDIUM 44

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00897 Published 2021-04-19 No fix listed CWE-89
TI-2020-16566 CVE-2020-27240 · GHSA-j7x2-649w-mxwh

SQL injection in OpenClinic

Priority MEDIUM 44

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00897 Published 2021-04-19 No fix listed CWE-89
TI-2020-16565 CVE-2020-27239 · GHSA-f896-64x6-54qp

SQL injection in OpenClinic

Priority MEDIUM 44

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00897 Published 2021-04-15 No fix listed CWE-89
TI-2020-16564 CVE-2020-27238 · GHSA-pqww-9fvq-hf8c

SQL injection in OpenClinic

Priority MEDIUM 44

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00897 Published 2021-04-15 No fix listed CWE-89
TI-2020-16563 CVE-2020-27237 · GHSA-fjh4-c964-7cc5

SQL injection in OpenClinic

Priority MEDIUM 44

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00897 Published 2021-04-15 No fix listed CWE-89
TI-2020-16553 CVE-2020-27227 · GHSA-2m4j-6gvx-869p

Command injection in OpenClinic

Priority MEDIUM 47

An exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02894 Published 2021-04-13 No fix listed CWE-77
TI-2020-16554 CVE-2020-27228 · GHSA-x79c-2qj9-pgc6

Incorrect default permissions in OpenClinic

Priority LOW 35

An incorrect default permissions vulnerability exists in the installation functionality of OpenClinic GA 5.173.3.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00763 Published 2021-04-13 No fix listed CWE-276
TI-2020-16562 CVE-2020-27236 · GHSA-qf52-pvgg-vmm3

SQL injection in OpenClinic

Priority MEDIUM 44

An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the compnomenclature parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00908 Published 2021-04-13 No fix listed CWE-89
Load more