Approved changes feed: RSS · Atom

cpe:2.3:a:openemr:openemr:4.1.0:*:*:*:*:*:*:*

part: a version: 4.1.0 update: *

VendorOpenemr (a54ffea0-9d94-50a8-b230-25df7dfc03af)
ProductOpenemr (e320d827-0429-5755-8368-7127dd6e8041)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/openemr/openemr purl2cpe 2026-06-01 10:18:08.096570
pkg:docker/openemr/openemr purl2cpe 2026-06-01 10:18:08.096572
pkg:github/openemr/openemr purl2cpe 2026-06-01 10:18:08.096573
pkg:sourceforge/openemr purl2cpe 2026-06-01 10:18:08.096574

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0992 vulnerable 2026-06-08 05:00:46.822935 Details available
interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter.
Published: 2012-02-07T21:00:00.000Z
Updated: 2024-08-06T18:45:26.111Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0991 vulnerable 2026-06-08 05:00:46.822479 Details available
Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter.
Published: 2012-02-07T21:00:00.000Z
Updated: 2024-08-06T18:45:26.264Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.