CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/05/2025 |
| CVE-2024-22611 | 심각9.8 | OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controller.php. | 03/04/2025 |
| CVE-2025-31121 | 보통5.4 | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. This vulnerability is fixed in 7.0.3.1. | 01/04/2025 |
| CVE-2025-31117 | 높음7.5 | OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery (OOB SSRF) vulnerability was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal resources. this attack do | 31/03/2025 |
| CVE-2025-30161 | 보통5.4 | OpenEMR is a free and open source electronic health records and medical practice management application. A stored XSS vulnerability in the Bronchitis form component of OpenEMR allows anyone who is able to edit a bronchitis form to steal credentials from administrators. This vulnerability is fixed in 7.0.3. | 31/03/2025 |
| CVE-2025-30149 | 보통4.6 | OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting (XSS) in the AJAX Script interface\super\layout_listitems_ajax.php via the target parameter. This vulnerability is fixed in 7.0.3. | 31/03/2025 |
| CVE-2025-29772 | 보통6.1 | OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hidden_subcategory is output to the page without being properly processed. This leads to a reflected cross-site scripting (XSS) vul;nerability in CAMOS new.php. This vulnerability is fixed in 7.0. | 31/03/2025 |
| CVE-2025-29789 | 높음7.5 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue. | 25/03/2025 |
| CVE-2024-0875 | 보통4.8 | A stored cross-site scripting (XSS) vulnerability exists in openemr/openemr version 7.0.1. An attacker can inject malicious payloads into the 'inputBody' field in the Secure Messaging feature, which can then be sent to other users. When the recipient views the malicious message, the payload is executed, potentially com | 15/11/2024 |
| CVE-2024-37734 | 심각9.8 | An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid parameter. | 26/06/2024 |
| CVE-2024-26476 | 낮음3.5 | An issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted script to the formid parameter in the ereq_form.php component. | 28/02/2024 |
| CVE-2023-2950 | 높음8.1 | Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1. | 28/05/2023 |
| CVE-2023-2949 | 보통6.1 | Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1. | 28/05/2023 |
| CVE-2023-2948 | 보통6.1 | Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1. | 28/05/2023 |
| CVE-2023-2947 | 보통4.8 | Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1. | 27/05/2023 |
| CVE-2023-2946 | 높음8.1 | Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. | 27/05/2023 |
| CVE-2023-2945 | 보통5.4 | Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1. | 27/05/2023 |
| CVE-2023-2944 | 보통5.4 | Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. | 27/05/2023 |