CVE-2026-13610

CVE-2026-13610 KiviCare – 진료소 및 환자 관리 시스템 CWE-269 부적절한 권한 관리 | 공격자가 선택한 직원 역할로 비인증 등록 → 환자 PHI보호 건강 정보 노출 개요 KiviCare – 진료소 및 환자 관리 시스템 워드프레스 플러그인4.5.1 이하 버전에서 발견된 치명적인 취약점으로, 비인증 공격자가 자신이 선택한 비밀번호로 의사kiviCaredoctor 또는 접수원kiviCarereceptionist 계정을 등록하고, 공격자가 선택한 진료소에 매핑할 수 있습니다. 이 취약점은 공개 등록 엔드포인트...

CVE-2020-28937

OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's medical test results, possibly resulting in disclosure of Protected Health Information PHI stored in the application, via a direct request for the /tests/ URI...

CVE-2020-28937

CVE-2020-28937 affects OpenClinic 0.8.2. A missing authentication issue allows unauthenticated users to access a patient’s medical test results via direct requests to the /tests/ URI, potentially exposing PHI. The vulnerability is highlighted in multiple sources (NVD entry, ThreatPost report) as ...

CVE-2020-28937: Missing Authentication for Critical Function

OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's medical test results, possibly resulting in disclosure of Protected Health Information PHI stored in the application, via a direct request for the /tests/ URI...

Information disclosure

Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to communicate order information with an order entry system. This could allow an attacker with network access to view sensitive data including PHI...

PT-2020-12984

Name of the Vulnerable Software and Affected Versions Baxter ExactaMix EM 2400 versions 1.10 through 1.14 Baxter ExactaMix EM 1200 versions 1.1 through 1.5 Description The issue concerns hard-coded administrative account credentials for the ExactaMix operating system. This could allow an attacker...

PT-2020-12980

Name of the Vulnerable Software and Affected Versions Baxter ExactaMix EM 2400 versions 1.10 through 1.11 Baxter ExactaMix EM1200 versions 1.1 through 1.2 Description The systems use cleartext messages to communicate order information with an order entry system. This could allow an attacker with...