Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:openclinic:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductOpenclinic (c46e2245-29c5-57b7-9380-eacdc13fa540)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-27241 vulnerable 2026-06-08 05:23:52.449685 Details available
MEDIUM (6.4)
An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The serialnumber parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2021-04-19T20:33:41.000Z
Updated: 2024-08-04T16:11:36.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27240 vulnerable 2026-06-08 05:23:52.449191 Details available
MEDIUM (6.4)
An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The componentStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2021-04-19T20:33:33.000Z
Updated: 2024-08-04T16:11:36.315Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27239 vulnerable 2026-06-08 05:23:52.448675 Details available
MEDIUM (6.4)
An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The assetStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2021-04-15T13:38:43.000Z
Updated: 2024-08-04T16:11:36.265Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27238 vulnerable 2026-06-08 05:23:52.448273 Details available
MEDIUM (6.4)
An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2021-04-15T13:38:25.000Z
Updated: 2024-08-04T16:11:36.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27237 vulnerable 2026-06-08 05:23:52.447735 Details available
MEDIUM (6.4)
An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the The nomenclature parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Published: 2021-04-15T13:37:58.000Z
Updated: 2024-08-04T16:11:36.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27236 vulnerable 2026-06-08 05:23:52.447224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27235 vulnerable 2026-06-08 05:23:52.446646 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27234 vulnerable 2026-06-08 05:23:52.446139 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27233 vulnerable 2026-06-08 05:23:52.445740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27228 vulnerable 2026-06-08 05:23:52.441423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27227 vulnerable 2026-06-08 05:23:52.440877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27226 vulnerable 2026-06-08 05:23:52.439209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.