2693 matches found
CVE-2022-2494 Cross-site Scripting (XSS) - Stored in openemr/openemr
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-2494
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-2494 Cross-site Scripting (XSS) - Stored in openemr/openemr
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
EUVD-2022-34753
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-2494
CVE-2022-2494 is a Cross-site Scripting (XSS) vulnerability stored in OpenEMR repositories prior to version 7.0.0. Multiple connected sources consistently describe the issue as arising from failure to encode key/value data in patientdate.js, enabling attackers to execute JavaScript in a victim’s ...
CVE-2022-2493
CVE-2022-2493 affects OpenEMR prior to 7.0.0, where a missing functional-level access control allows non-privileged users to access administrator modules, enabling data access outside the expected Data Manager boundary. Reports and CVSS data confirm a HIGH-severity impact with confidentiality and...
CVE-2022-2493
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-2493 Data Access from Outside Expected Data Manager Component in openemr/openemr
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...
DOM-based Cross-Site Scripting (XSS) in OpenEMR 7.0.0 and below at White list files
Description We would like to report the vulnerability we found during software testing. The OpenEMR 7.0.0 latest version and below version; Open Source electronic health records and medical practice management application; has DOM-based Cross-Site Scripting XSS vulnerability in the...
PT-2022-17000
Name of the Vulnerable Software and Affected Versions openemr versions prior to 7.0.0 Description The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input and later displays it without proper validation, allowing attackers to inject malicious...
OpenEMR 安全漏洞
OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. versions of OpenEMR prior to 7.0.0 have an access control error...
OpenEMR 跨站脚本漏洞
OpenEMR is an open source healthcare management system from the Openemr community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. openemr versions prior to 7.0.0 have a cross-site scripting vulnerability...
CVE-2022-2494: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.0...
CVE-2022-2493: Data Access from Outside Expected Data Manager Component
Data Access from Outside Expected Data Manager Component in GitHub repository openemr/openemr prior to 7.0.0...
PT-2022-16991
Name of the Vulnerable Software and Affected Versions openemr/openemr versions prior to 7.0.0 Description The issue concerns data access from outside the expected Data Manager Component in the GitHub repository openemr/openemr. Recommendations For versions prior to 7.0.0, update to version 7.0.0 ...
Non-Privilege user can view Patient's Amendments
Description We would like to report the vulnerability we found during software testing. The OpenEMR 7.0.0 latest version Open-Source electronic health records and medical practice management application has Insecure direct object reference IDOR to function “Patient’s Amendments”, and it never bee...
Unauthorized to create and edit Amendments function
Description We would like to report the vulnerability we found during software testing. The OpenEMR 7.0.0 latest version Open Source electronic health records and medical practice management application has unauthorized create and edit on “Patient/dashboard/Amendments” with function...
WS-2022-0247
An incorrect synchronization issue was discovered in the chat function in openemr/openemr up to 7.0.0. While the username is not validated, an attacker can impersonate by sending messages with any name even though it does not match the name of the logged-in user. Version 7.0.0.1 contains a patch...
Reflected Cross Site Scripting in OpenEMR 7.0.0 and below at backup
Description We would like to report the vulnerability we found during software testing. The OpenEMR 7.0.0 latest version and below version Open Source electronic health records and medical practice management application has Reflected Cross Site Scripting vulnerability in the formstatus parameter...