Approved changes feed: RSS · Atom

cpe:2.3:a:open-emr:openemr:7.0.2.1:*:*:*:*:*:*:*

part: a version: 7.0.2.1 update: *

VendorOpen Emr (4d2478a1-b549-59b7-9c3b-4ea8a9eef12c)
ProductOpenemr (fd706c85-27bf-51b4-9a1f-14d712ef8e83)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/openemr/openemr purl2cpe 2026-06-01 10:11:40.905589
pkg:github/openemr/openemr purl2cpe 2026-06-01 10:11:40.905590
pkg:sourceforge/openemr purl2cpe 2026-06-01 10:11:40.905591

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-54347 vulnerable 2026-06-08 06:19:40.576174 OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass
HIGH (7.5)
OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint. Attackers can submit POST requests with authUser and clearPass parameters to systematically test username and password combinations without account lockout restrictions.
Published: 2026-05-05T11:24:50.970Z
Updated: 2026-05-06T14:08:52.856Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.