335 matches found
CVE-2018-19276
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body...
Deserialization of untrusted data
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body...
CVE-2018-19276
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body...
CVE-2018-19276
OpenMRS Platform vulnerability CVE-2018-19276 affects OpenMRS Platform
PT-2019-9785 · Openmrs · Openmrs
Name of the Vulnerable Software and Affected Versions: OpenMRS versions prior to 2.24.0 Description: The issue allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body. This is due to an Insecure Object Deserialization vulnerabilit...
OpenMRS Detection
Detection of OpenMRS. The script sends a connection request to the server and attempts to detect OpenMRS and to extract its version. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
OpenMRS RCE Vulnerability (Feb 2019) - Active Check
OpenMRS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openmrs:openmrs"; ...
Exploit for Deserialization of Untrusted Data in Openmrs
CVE-2018-19276 OpenMRS Insecure Object Deserialization RCE Fr...
OpenMRS Anti-serial Command Execution Vulnerability
OpenMRS is a patient-based medical record system. OpenMRS has an anti-serial command execution vulnerability in versions prior to 2.24.0 that can be exploited by an attacker to execute commands...
OpenMRS Platform Insecure Object Deserialization
Insecure Object Deserialization on the OpenMRS Platform Vulnerability Details CVE ID: CVE-2018-19276 Access Vector: Remote Security Risk: Critical Vulnerability: CWE-502 CVSS Base Score: 10.0 CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N JAVA 8 ENVIRONMENT By injecting an XML payload ...
OpenMRS Platform 2.24.0 - Insecure Object Deserialization
OpenMRS Platform 2.24.0 - Insecure Object Deserialization Insecure Object Deserialization on the OpenMRS Platform Vulnerability Details CVE ID: CVE-2018-19276 Access Vector: Remote Security Risk: Critical Vulnerability: CWE-502 CVSS Base Score: 10.0 CVSS vector:...
OpenMRS Platform < 2.24.0 - Insecure Object Deserialization Vulnerability
Exploit for java platform in category web applications Insecure Object Deserialization on the OpenMRS Platform Vulnerability Details CVE ID: CVE-2018-19276 Access Vector: Remote Security Risk: Critical Vulnerability: CWE-502 CVSS Base Score: 10.0 CVSS vector:...
OpenMRS Platform < 2.24.0 - Insecure Object Deserialization
Insecure Object Deserialization on the OpenMRS Platform Vulnerability Details CVE ID: CVE-2018-19276 Access Vector: Remote Security Risk: Critical Vulnerability: CWE-502 CVSS Base Score: 10.0 CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N JAVA 8 ENVIRONMENT By injecting an XML payload ...
CVE-2018-16521
An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...
Xxe
An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...
CVE-2018-16521
An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...
CVE-2018-16521
The CVE-2018-16521 entry describes an XML External Entity (XXE) vulnerability affecting OpenMRS HTML Form Entry 3.7.0 as distributed in OpenMRS Reference Application 2.8.0. The connected records confirm the affected software and the XXE root cause but do not provide additional exploit details, af...
CVE-2018-16521
An XML External Entity XXE vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0...
The vulnerability of the Reporting Compatibility Add-On module of the OpenMRS Reference Application, which allows a violator to execute arbitrary code.
The vulnerability of the Reporting Compatibility Add-On module of the OpenMRS Reference Application, which is used for working with medical records, stems from the lack of an authentication process during deserialization of XML files into ReportSchema objects. Exploiting this vulnerability allows...
CVE-2017-12796
The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenticate users when deserializing XML input into ReportSchema objects. The result is that remote unauthenticated users are able to execute operating system...