CVE-2015-4591: Improper Neutralization of Input During Web Page Generation

eClinicalWorks Population Health CCMR suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to inject arbitrary javascript via the strMessage parameter...

PT-2017-6765

Name of the Vulnerable Software and Affected Versions eClinicalWorks Population Health CCMR affected versions not specified Description The issue concerns a cross-site scripting vulnerability. It affects the login.jsp file, allowing remote unauthenticated users to inject arbitrary JavaScript via...