OpenEMR 7.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:open-emr:openemr:7.0.1:*:*:*:*:*:*:*part: a version: 7.0.1 update: *
| Vendor | Open Emr (4d2478a1-b549-59b7-9c3b-4ea8a9eef12c) |
|---|---|
| Product | Openemr (fd706c85-27bf-51b4-9a1f-14d712ef8e83) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/openemr/openemr |
purl2cpe | 2026-06-01 10:11:40.905576 |
pkg:github/openemr/openemr |
purl2cpe | 2026-06-01 10:11:40.905578 |
pkg:sourceforge/openemr |
purl2cpe | 2026-06-01 10:11:40.905579 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-0875 |
vulnerable | 2026-06-08 06:22:03.048594 |
Stored XSS in openemr/openemr
HIGH (8.1)
A stored cross-site scripting (XSS) vulnerability exists in openemr/openemr version 7.0.1. An attacker can inject malicious payloads into the 'inputBody' field in the Secure Messaging feature, which can then be sent to other users. When the recipient views the malicious message, the payload is executed, potentially compromising their account. This issue is fixed in version 7.0.2.1.
Published: 2024-11-15T10:57:25.334Z
Updated: 2024-11-15T20:54:38.603Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-54347 |
vulnerable | 2026-06-08 06:19:40.571581 |
OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass
HIGH (7.5)
OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint. Attackers can submit POST requests with authUser and clearPass parameters to systematically test username and password combinations without account lockout restrictions.
Published: 2026-05-05T11:24:50.970Z
Updated: 2026-05-06T14:08:52.856Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.