OpenEMR 7.0.3.4
Approved changes feed: RSS · Atom
cpe:2.3:a:open-emr:openemr:7.0.3.4:*:*:*:*:*:*:*part: a version: 7.0.3.4 update: *
| Vendor | Open Emr (4d2478a1-b549-59b7-9c3b-4ea8a9eef12c) |
|---|---|
| Product | Openemr (fd706c85-27bf-51b4-9a1f-14d712ef8e83) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/openemr/openemr |
purl2cpe | 2026-06-01 10:11:40.905617 |
pkg:github/openemr/openemr |
purl2cpe | 2026-06-01 10:11:40.905618 |
pkg:sourceforge/openemr |
purl2cpe | 2026-06-01 10:11:40.905619 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-54373 |
vulnerable | 2026-06-08 07:33:12.499606 |
OpenEMR may expose Contents of Clinical Notes and Care Planto users who do not have Sensitivities=high privilege
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a vulnerability where sensitive data is unintentionally revealed to unauthorized parties. Contents of Clinical Notes and Care Plan, where an encounter has Sensitivity=high, can be viewed and changed by users who do not have Sensitivities=high privilege. Version 7.0.4 fixes the issue.
Published: 2026-01-27T23:11:57.929Z
Updated: 2026-01-28T21:06:36.828Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-54347 |
vulnerable | 2026-06-08 06:19:40.579765 |
OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass
HIGH (7.5)
OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint. Attackers can submit POST requests with authUser and clearPass parameters to systematically test username and password combinations without account lockout restrictions.
Published: 2026-05-05T11:24:50.970Z
Updated: 2026-05-06T14:08:52.856Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.