Vulnerabilities

TI-2025-11839 CVE-2025-12922 · GHSA-3wqv-qpc6-2469

OpenClinica Community Edition CRF Data Import ImportCRFData path traversal

MEDIUM 57

A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00583 Published 2025-11-10 No fix listed CWE-22

TI-2025-11838 CVE-2025-12921 · GHSA-jxxq-v434-pmg5

MEDIUM 57

A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00574 Published 2025-11-09 No fix listed CWE-74

TI-2022-08644 CVE-2022-24831

MEDIUM 45

OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0114 Published 2022-05-14 Fixed in 3.13.1, 3.14.1 +2 CWE-89

TI-2022-08643 CVE-2022-24830

HIGH 75

OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03225 Published 2022-05-13 Fixed in 3.16 CWE-22