CVEs we hold for Openemr/openemr
Records whose assigning authority named Openemr/openemr as the affected vendor. Newest identifiers first, capped at 200.
CVE-2023-2950Improper Authorization in openemr/openemropenemr/openemr CVE-2023-2949Cross-site Scripting (XSS) - Reflected in openemr/openemropenemr/openemr CVE-2023-2948Cross-site Scripting (XSS) - Generic in openemr/openemropenemr/openemr CVE-2023-2947Cross-site Scripting (XSS) - Stored in openemr/openemropenemr/openemr CVE-2023-2946Improper Access Control in openemr/openemropenemr/openemr CVE-2023-2945Missing Authorization in openemr/openemropenemr/openemr CVE-2023-2944Improper Access Control in openemr/openemropenemr/openemr CVE-2023-2942Improper Input Validation in openemr/openemropenemr/openemr CVE-2023-2674Improper Access Control in openemr/openemropenemr/openemr CVE-2023-2566Cross-site Scripting (XSS) - Stored in openemr/openemropenemr/openemr CVE-2022-4733Cross-site Scripting (XSS) - Stored in openemr/openemropenemr/openemr CVE-2022-4615Cross-site Scripting (XSS) - Reflected in openemr/openemropenemr/openemr CVE-2022-4567Improper Access Control in openemr/openemropenemr/openemr CVE-2022-4506Unrestricted Upload of File with Dangerous Type in openemr/openemropenemr/openemr CVE-2022-4505Authorization Bypass Through User-Controlled Key in openemr/openemropenemr/openemr CVE-2022-4504Improper Input Validation in openemr/openemropenemr/openemr CVE-2022-4503Cross-site Scripting (XSS) - Generic in openemr/openemropenemr/openemr CVE-2022-4502Cross-site Scripting (XSS) - Reflected in openemr/openemropenemr/openemr CVE-2022-2824Authorization Bypass Through User-Controlled Key in openemr/openemropenemr/openemr CVE-2022-2734Improper Restriction of Rendered UI Layers or Frames in openemr/openemropenemr/openemr CVE-2022-2733Cross-site Scripting (XSS) - Reflected in openemr/openemropenemr/openemr CVE-2022-2732Missing Authorization in openemr/openemropenemr/openemr CVE-2022-2731Cross-site Scripting (XSS) - Reflected in openemr/openemropenemr/openemr CVE-2022-2730Authorization Bypass Through User-Controlled Key in openemr/openemropenemr/openemr CVE-2022-2729Cross-site Scripting (XSS) - DOM in openemr/openemropenemr/openemr CVE-2022-2494Cross-site Scripting (XSS) - Stored in openemr/openemropenemr/openemr CVE-2022-2493Data Access from Outside Expected Data Manager Component in openemr/openemropenemr/openemr CVE-2022-1461Non Privilege User can Enable or Disable Registered in openemr/openemropenemr/openemr CVE-2022-1459Non-Privilege User Can View Patient’s Disclosures in openemr/openemropenemr/openemr CVE-2022-1458Stored XSS Leads To Session Hijacking in openemr/openemropenemr/openemr CVE-2022-1181Stored Cross Site Scripting in openemr/openemropenemr/openemr CVE-2022-1180Reflected Cross Site Scripting in openemr/openemropenemr/openemr CVE-2022-1179Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemropenemr/openemr CVE-2022-1178Stored Cross Site Scripting in openemr/openemropenemr/openemr CVE-2022-1177Accounting User Can Download Patient Reports in openemr in openemr/openemropenemr/openemr 37 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.