Approved changes feed: RSS · Atom

cpe:2.3:a:open_source:openclinic_ga:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpen Source (997f745c-7ebe-55ac-932e-2bbf44dcd60c)
ProductOpenclinic Ga (3e3514be-7c60-554f-9b77-689929366c63)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-14493 vulnerable 2026-06-08 05:19:23.571747 OpenClinic GA
HIGH (8.8)
A low-privilege user may use SQL syntax to write arbitrary files to the OpenClinic GA 5.09.02 and 5.89.05b server, which may allow the execution of arbitrary commands.
Published: 2020-07-29T12:27:28.691Z
Updated: 2024-09-17T03:13:05.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14492 vulnerable 2026-06-08 05:19:23.571150 OpenClinic GA
MEDIUM (5.4)
OpenClinic GA 5.09.02 and 5.89.05b does not properly neutralize user-controllable input, which may allow the execution of malicious code within the user’s browser.
Published: 2020-07-29T12:29:11.124Z
Updated: 2024-09-16T22:45:24.888Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14490 vulnerable 2026-06-08 05:19:23.570332 OpenClinic GA
HIGH (8.8)
OpenClinic GA 5.09.02 and 5.89.05b includes arbitrary local files specified within its parameter and executes some files, which may allow disclosure of sensitive files or the execution of malicious uploaded files.
Published: 2020-07-29T12:25:53.168Z
Updated: 2024-09-16T17:03:10.971Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14489 vulnerable 2026-06-08 05:19:23.569724 OpenClinic GA
MEDIUM (6.2)
OpenClinic GA 5.09.02 and 5.89.05b stores passwords using inadequate hashing complexity, which may allow an attacker to recover passwords using known password cracking techniques.
Published: 2020-07-29T12:24:11.103Z
Updated: 2024-09-17T01:46:22.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14488 vulnerable 2026-06-08 05:19:23.567983 OpenClinic GA
HIGH (8.8)
OpenClinic GA 5.09.02 and 5.89.05b does not properly verify uploaded files, which may allow a low-privilege user to upload and execute arbitrary files on the system.
Published: 2020-07-29T13:15:21.912Z
Updated: 2024-09-17T02:06:04.474Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14487 vulnerable 2026-06-08 05:19:23.566228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14486 vulnerable 2026-06-08 05:19:23.565614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.