Appointment Scheduling Module
Approved changes feed: RSS · Atom
cpe:2.3:a:openmrs:appointment_scheduling_module:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Openmrs (06cb4728-e719-522c-9a70-e900854f95b6) |
|---|---|
| Product | Appointment Scheduling Module (96f2b7cd-ab4e-525e-b6cd-dca8854628b5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openmrs/openmrs-module-appointmentschedulingui |
purl2cpe | 2026-06-01 10:11:38.083742 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-4727 |
vulnerable | 2026-06-08 05:52:00.249732 |
OpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in OpenMRS Appointment Scheduling Module up to 1.16.x. This affects the function getNotes of the file api/src/main/java/org/openmrs/module/appointmentscheduling/AppointmentRequest.java of the component Notes Handler. The manipulation of the argument notes leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.17.0 is able to address this issue. The name of the patch is 2ccbe39c020809765de41eeb8ee4c70b5ec49cc8. It is recommended to upgrade the affected component. The identifier VDB-216741 was assigned to this vulnerability.
Published: 2022-12-24T00:00:00.000Z
Updated: 2025-04-10T20:11:21.213Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36635 |
vulnerable | 2026-06-08 05:25:49.273336 |
OpenMRS Appointment Scheduling Module AppointmentTypeValidator.java validateFieldName cross site scripting
LOW (3.5)
A vulnerability was found in OpenMRS Appointment Scheduling Module up to 1.12.x. It has been classified as problematic. This affects the function validateFieldName of the file api/src/main/java/org/openmrs/module/appointmentscheduling/validator/AppointmentTypeValidator.java. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.13.0 is able to address this issue. The name of the patch is 34213c3f6ea22df427573076fb62744694f601d8. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216915.
Published: 2022-12-27T22:51:59.270Z
Updated: 2025-04-11T14:35:54.524Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.