341 matches found
CVE-2017-12795
OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: Improper Input Validation...
CVE-2017-12795
OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: Improper Input Validation...
CVE-2017-12795
OpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: Improper Input Validation...
CVE-2017-12795
CVE-2017-12795 affects OpenMRS OpenMRS module-htmlformentry 3.3.2 with an improper input validation vulnerability. Root cause and exact vulnerable component are not elaborated beyond the module name; impact is described generally as a validation error, with CVSS indicating high to critical severi...
CVE-2018-19276
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body...
CVE-2018-19276
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body...
Deserialization of untrusted data
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body...
CVE-2018-19276
OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body...
CVE-2018-19276
OpenMRS Platform vulnerability CVE-2018-19276 affects OpenMRS Platform
PT-2019-9785 · Openmrs · Openmrs
Name of the Vulnerable Software and Affected Versions: OpenMRS versions prior to 2.24.0 Description: The issue allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body. This is due to an Insecure Object Deserialization vulnerabilit...
OpenMRS Detection
Detection of OpenMRS. The script sends a connection request to the server and attempts to detect OpenMRS and to extract its version. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
OpenMRS RCE Vulnerability (Feb 2019) - Active Check
OpenMRS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openmrs:openmrs"; ...
Exploit for Deserialization of Untrusted Data in Openmrs
CVE-2018-19276 OpenMRS Insecure Object Deserialization RCE Fr...
OpenMRS Anti-serial Command Execution Vulnerability
OpenMRS is a patient-based medical record system. OpenMRS has an anti-serial command execution vulnerability in versions prior to 2.24.0 that can be exploited by an attacker to execute commands...
OpenMRS Platform Insecure Object Deserialization
Insecure Object Deserialization on the OpenMRS Platform Vulnerability Details CVE ID: CVE-2018-19276 Access Vector: Remote Security Risk: Critical Vulnerability: CWE-502 CVSS Base Score: 10.0 CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N JAVA 8 ENVIRONMENT By injecting an XML payload ...
OpenMRS Platform < 2.24.0 - Insecure Object Deserialization Vulnerability
Exploit for java platform in category web applications Insecure Object Deserialization on the OpenMRS Platform Vulnerability Details CVE ID: CVE-2018-19276 Access Vector: Remote Security Risk: Critical Vulnerability: CWE-502 CVSS Base Score: 10.0 CVSS vector:...
OpenMRS Platform 2.24.0 - Insecure Object Deserialization
OpenMRS Platform 2.24.0 - Insecure Object Deserialization Insecure Object Deserialization on the OpenMRS Platform Vulnerability Details CVE ID: CVE-2018-19276 Access Vector: Remote Security Risk: Critical Vulnerability: CWE-502 CVSS Base Score: 10.0 CVSS vector:...
OpenMRS Platform < 2.24.0 - Insecure Object Deserialization
Insecure Object Deserialization on the OpenMRS Platform Vulnerability Details CVE ID: CVE-2018-19276 Access Vector: Remote Security Risk: Critical Vulnerability: CWE-502 CVSS Base Score: 10.0 CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N JAVA 8 ENVIRONMENT By injecting an XML payload ...
OpenMRS Java Deserialization RCE
OpenMRS is an open-source platform that supplies users with a customizable medical record system. There exists an object deserialization vulnerability in the webservices.rest module used in OpenMRS Platform. Unauthenticated remote code execution can be achieved by sending a malicious XML payload ...