Approved changes feed: RSS · Atom

cpe:2.3:a:openmrs:openmrs_module_reporting:1.12.0:*:*:*:*:*:*:*

part: a version: 1.12.0 update: *

VendorOpenmrs (06cb4728-e719-522c-9a70-e900854f95b6)
ProductOpenmrs Module Reporting (ce4cfd0a-4937-5b2f-9b97-a24628526ca3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/openmrs/openmrs-module-reporting purl2cpe 2026-06-01 10:11:38.244968

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7990 vulnerable 2026-06-08 05:10:06.818388 Details available
The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication is hijacked to insert JavaScript into a name field in webapp/reports/manageReports.jsp.
Published: 2017-04-21T00:00:00.000Z
Updated: 2024-09-16T22:25:18.957Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.