CVE-2026-15477

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endpoint. Performing a manipulation of the argument test results in sql injection. The attack can be initiated remotely...

CVE-2026-15477 Bahmni bahmnicore Search Endpoint sql additionalParams sql injection

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endpoint. Performing a manipulation of the argument test results in sql injection. The attack can be initiated remotely...

CVE-2026-15477 Bahmni bahmnicore Search Endpoint sql additionalParams sql injection

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endpoint. Performing a manipulation of the argument test results in sql injection. The attack can be initiated remotely...

CVE-2026-15477

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endpoint. Performing a manipulation of the argument test results in sql injection. The attack can be initiated remotely...

EUVD-2026-43199

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endpoint. Performing a manipulation of the argument test results in sql injection. The attack can be initiated remotely...

org.bahmni.module:vagrant-deploy (1.2.0) potentially affected by CVE-2026-15477 via org.bahmni.module:bahmnicore-omod (1.2.0)

org.bahmni.module:bahmnicore-omod MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bahmni.module:bahmnicore-omod and may be impacted: - org.bahmni.module:vagrant-deploy 1.2.0 Source cves: CVE-2026-15477 Source advisory:...

org.bahmni.module:vagrant-deploy (2.0.0) potentially affected by CVE-2026-15477 via org.bahmni.module:bahmnicore-omod (2.0.0)

org.bahmni.module:bahmnicore-omod MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bahmni.module:bahmnicore-omod and may be impacted: - org.bahmni.module:vagrant-deploy 2.0.0 Source cves: CVE-2026-15477 Source advisory:...

org.bahmni.module:vagrant-deploy (1.0.0) potentially affected by CVE-2026-15477 via org.bahmni.module:bahmnicore-omod (1.0.0)

org.bahmni.module:bahmnicore-omod MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bahmni.module:bahmnicore-omod and may be impacted: - org.bahmni.module:vagrant-deploy 1.0.0 Source cves: CVE-2026-15477 Source advisory:...

org.bahmni.module:vagrant-deploy (1.1.0) potentially affected by CVE-2026-15477 via org.bahmni.module:bahmnicore-omod (1.1.0)

org.bahmni.module:bahmnicore-omod MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bahmni.module:bahmnicore-omod and may be impacted: - org.bahmni.module:vagrant-deploy 1.1.0 Source cves: CVE-2026-15477 Source advisory:...

CVE-2026-15477

Bahmni bahmnicore (up to 0.93) is affected in the Search Endpoint (file /openmrs/ws/rest/v1/bahmnicore/sql), specifically the function additionalParams. A manipulated argument can lead to SQL injection, with remote exploitation possible and public exploit details. Remediation: upgrade to 0.93.1, ...

PT-2026-57522

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endpoint. Performing a manipulation of the argument test results in sql injection. The attack can be initiated remotely...

CVE-2026-15477: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Bahmni bahmnicore up to 0.93. This affects the function additionalParams of the file /openmrs/ws/rest/v1/bahmnicore/sql of the component Search Endpoint. Performing a manipulation of the argument test results in sql injection. The attack can be initiated remotely...