Openemr/openemr
This hub aggregates every CVE we track for Openemr/openemr, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.
37
CVEs tracked
0
Critical
12
High
0
In CISA KEV
Severity distribution
MEDIUM24HIGH12LOW1
Monthly trend
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Openemr/openemr.
- CVE-2024-0875Stored XSS in openemr/openemr4.8
- CVE-2023-2949Cross-site Scripting (XSS) - Reflected in openemr/openemr6.1
- CVE-2023-2948Cross-site Scripting (XSS) - Generic in openemr/openemr6.1
- CVE-2023-2950Improper Authorization in openemr/openemr8.1
- CVE-2023-2947Cross-site Scripting (XSS) - Stored in openemr/openemr4.8
- CVE-2023-2946Improper Access Control in openemr/openemr8.1
- CVE-2023-2943Code Injection in openemr/openemr8.8
- CVE-2023-2945Missing Authorization in openemr/openemr5.4
- CVE-2023-2942Improper Input Validation in openemr/openemr8.1
- CVE-2023-2944Improper Access Control in openemr/openemr5.4
- CVE-2023-2674Improper Access Control in openemr/openemr4.3
- CVE-2023-2566Cross-site Scripting (XSS) - Stored in openemr/openemr4.8
- CVE-2022-4733Cross-site Scripting (XSS) - Stored in openemr/openemr4.8
- CVE-2022-4615Cross-site Scripting (XSS) - Reflected in openemr/openemr6.1
- CVE-2022-4567Improper Access Control in openemr/openemr8.1
Product normalization is registry-driven with AI assist and human review. How it works