Org.Openmrs.Module
Approved changes feed: RSS · Atom
cpe:2.3:a:openmrs:org.openmrs.module:legacyui-api:*:*:*:*:*:*:*:*
part: a version: legacyui-api update: *
| Vendor | Openmrs (06cb4728-e719-522c-9a70-e900854f95b6) |
|---|---|
| Product | Org.Openmrs.Module (ea12cc99-9676-5206-88a4-e3a922957ec6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44715 |
vulnerable | 2026-09-16 04:33:45.657946 |
OpenMRS has Broken Access Control in HL7 Configuration
OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the `startHl7ArchiveMigration` method is accessible, which should be restricted to admin-level accounts. Versions 1.23.0 and 2.10.0 patch the issue.
Published: 2026-09-11T21:19:00.414Z
Updated: 2026-09-15T16:42:38.624Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.