Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:openmrs:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Openmrs (abb9a0d6-7363-5aa3-ae20-23d45beee638) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-5733 |
vulnerable | 2026-06-08 05:26:43.591991 |
Details available
In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows the export of potentially sensitive information.
Published: 2020-04-17T18:27:07.000Z
Updated: 2024-08-04T08:39:25.743Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5732 |
vulnerable | 2026-06-08 05:26:43.591685 |
Details available
In OpenMRS 2.9 and prior, he import functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows unauthenticated users to use a feature typically restricted to administrators.
Published: 2020-04-17T18:27:00.000Z
Updated: 2024-08-04T08:39:25.692Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5731 |
vulnerable | 2026-06-08 05:26:43.589607 |
Details available
In OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting.
Published: 2020-04-17T18:30:05.000Z
Updated: 2024-08-04T08:39:25.773Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5730 |
vulnerable | 2026-06-08 05:26:43.589216 |
Details available
In OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross-site scripting.
Published: 2020-04-17T18:29:59.000Z
Updated: 2024-08-04T08:39:25.665Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5729 |
vulnerable | 2026-06-08 05:26:43.588796 |
Details available
In OpenMRS 2.9 and prior, the UI Framework Error Page reflects arbitrary, user-supplied input back to the browser, which can result in XSS. Any page that is able to trigger a UI Framework Error is susceptible to this issue.
Published: 2020-04-17T18:29:54.000Z
Updated: 2024-08-04T08:39:25.648Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5728 |
vulnerable | 2026-06-08 05:26:43.587522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.