GCVE - cpe:2.3:a:openmrs:openmrs:2.1:*:*:*:standalone:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:openmrs:openmrs:2.1:*:*:*:standalone:*:*:*

part: a version: 2.1 update: *

Vendor	Openmrs (`06cb4728-e719-522c-9a70-e900854f95b6`)
Product	Openmrs (`e077daf1-b04d-516f-8219-19eb43cf3f47`)
Edition	*
Language	*
Software edition	standalone
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:bitbucket/ch3ck_/openmrs-core`	purl2cpe	2026-06-01 10:11:38.113762
`pkg:github/openmrs/openmrs-esm-core`	purl2cpe	2026-06-01 10:11:38.113763
`pkg:github/openmrs/openmrs-module-htmlformentry`	purl2cpe	2026-06-01 10:11:38.113764
`pkg:maven/org.openmrs.maven/openmrs-sdk`	purl2cpe	2026-06-01 10:11:38.113766
`pkg:npm/openmrs`	purl2cpe	2026-06-01 10:11:38.113767
`pkg:sourceforge/openmrs`	purl2cpe	2026-06-01 10:11:38.113768

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-8073`	vulnerable	2026-06-08 05:06:07.148494	Details available Cross-site request forgery (CSRF) vulnerability in OpenMRS 2.1 Standalone Edition allows remote attackers to hijack the authentication of administrators for requests that add a new user via a Save User action to admin/users/user.form. Published: 2014-10-23T14:00:00.000Z Updated: 2024-08-06T13:10:50.109Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/128748/OpenMRS-2.1-Access-Bypass-XSS-CSRF.html http://www.securityfocus.com/bid/70664 https://exchange.xforce.ibmcloud.com/vulnerabilities/97692	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8072`	vulnerable	2026-06-08 05:06:07.148189	Details available The administration module in OpenMRS 2.1 Standalone Edition allows remote authenticated users to obtain read access via a direct request to /admin. Published: 2014-10-23T14:00:00.000Z Updated: 2024-08-06T13:10:50.066Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/128748/OpenMRS-2.1-Access-Bypass-XSS-CSRF.html https://exchange.xforce.ibmcloud.com/vulnerabilities/97693 http://www.securityfocus.com/bid/70664	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8071`	vulnerable	2026-06-08 05:06:07.147780	Details available Multiple cross-site scripting (XSS) vulnerabilities in OpenMRS 2.1 Standalone Edition allow remote attackers to inject arbitrary web script or HTML via the (1) givenName, (2) familyName, (3) address1, or (4) address2 parameter to registrationapp/registerPatient.page; the (5) comment parameter to allergyui/allergy.page; the (6) w10 parameter to htmlformentryui/htmlform/enterHtmlForm/submit.action; the (7) HTTP Referer Header to login.htm; the (8) returnUrl parameter to htmlformentryui/htmlform/enterHtmlFormWithStandardUi.page or (9) coreapps/mergeVisits.page; or the (10) visitId parameter to htmlformentryui/htmlform/enterHtmlFormWithSimpleUi.page. Published: 2014-10-23T14:00:00.000Z Updated: 2024-08-06T13:10:50.247Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/128748/OpenMRS-2.1-Access-Bypass-XSS-CSRF.html https://exchange.xforce.ibmcloud.com/vulnerabilities/97690 http://www.securityfocus.com/bid/70664	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.