Openemr/Openemr
Approved changes feed: RSS · Atom
cpe:2.3:a:openemr:openemr/openemr:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Openemr (a54ffea0-9d94-50a8-b230-25df7dfc03af) |
|---|---|
| Product | Openemr/Openemr (0d7aa8f8-dfb5-5200-8e49-4b678dd04600) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-0875 |
vulnerable | 2026-06-08 06:22:03.047624 |
Stored XSS in openemr/openemr
HIGH (8.1)
A stored cross-site scripting (XSS) vulnerability exists in openemr/openemr version 7.0.1. An attacker can inject malicious payloads into the 'inputBody' field in the Secure Messaging feature, which can then be sent to other users. When the recipient views the malicious message, the payload is executed, potentially compromising their account. This issue is fixed in version 7.0.2.1.
Published: 2024-11-15T10:57:25.334Z
Updated: 2024-11-15T20:54:38.603Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2950 |
vulnerable | 2026-06-08 06:02:43.683700 |
Improper Authorization in openemr/openemr
MEDIUM (6.3)
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1.
Published: 2023-05-28T00:00:00.000Z
Updated: 2025-01-14T16:22:28.716Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2949 |
vulnerable | 2026-06-08 06:02:43.683225 |
Cross-site Scripting (XSS) - Reflected in openemr/openemr
HIGH (8.3)
Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1.
Published: 2023-05-28T00:00:00.000Z
Updated: 2025-01-14T16:24:44.879Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2948 |
vulnerable | 2026-06-08 06:02:43.682757 |
Cross-site Scripting (XSS) - Generic in openemr/openemr
HIGH (8.3)
Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1.
Published: 2023-05-28T00:00:00.000Z
Updated: 2025-01-14T16:34:53.363Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2947 |
vulnerable | 2026-06-08 06:02:43.674487 |
Cross-site Scripting (XSS) - Stored in openemr/openemr
MEDIUM (4.7)
Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1.
Published: 2023-05-27T00:00:00.000Z
Updated: 2025-01-14T18:45:05.373Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2946 |
vulnerable | 2026-06-08 06:02:43.674050 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2945 |
vulnerable | 2026-06-08 06:02:43.673751 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2944 |
vulnerable | 2026-06-08 06:02:43.673438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2943 |
vulnerable | 2026-06-08 06:02:43.673115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2942 |
vulnerable | 2026-06-08 06:02:43.672598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2674 |
vulnerable | 2026-06-08 06:02:42.803857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2566 |
vulnerable | 2026-06-08 06:02:42.533498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4733 |
vulnerable | 2026-06-08 05:52:00.256706 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4615 |
vulnerable | 2026-06-08 05:52:00.003981 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4567 |
vulnerable | 2026-06-08 05:51:59.770216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4506 |
vulnerable | 2026-06-08 05:51:59.643248 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4505 |
vulnerable | 2026-06-08 05:51:59.642808 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4504 |
vulnerable | 2026-06-08 05:51:59.642311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4503 |
vulnerable | 2026-06-08 05:51:59.641918 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4502 |
vulnerable | 2026-06-08 05:51:59.640384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2824 |
vulnerable | 2026-06-08 05:43:36.558801 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2734 |
vulnerable | 2026-06-08 05:43:36.082144 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2733 |
vulnerable | 2026-06-08 05:43:36.081820 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2732 |
vulnerable | 2026-06-08 05:43:36.081413 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2731 |
vulnerable | 2026-06-08 05:43:36.080857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2730 |
vulnerable | 2026-06-08 05:43:36.080446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2729 |
vulnerable | 2026-06-08 05:43:36.080002 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2494 |
vulnerable | 2026-06-08 05:43:35.680604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2493 |
vulnerable | 2026-06-08 05:43:35.679207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1461 |
vulnerable | 2026-06-08 05:39:13.187085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1459 |
vulnerable | 2026-06-08 05:39:13.186186 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1458 |
vulnerable | 2026-06-08 05:39:13.185792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1181 |
vulnerable | 2026-06-08 05:39:12.361953 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1180 |
vulnerable | 2026-06-08 05:39:12.361629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1179 |
vulnerable | 2026-06-08 05:39:12.361215 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1178 |
vulnerable | 2026-06-08 05:39:12.360777 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1177 |
vulnerable | 2026-06-08 05:39:12.359444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.