Browse CVEs

HIGH 7.5 CVE-2017-5598 An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be explo… Patient Portal No fix yet Fix from $1,9502017-01-27 MEDIUM 6.1 CVE-2017-5599 An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a reflected Cross Site Scripting vulnerability which affects the raceM… Patient Portal Mitigation only Fix from $1,6002017-01-27 CRITICAL 9.8 CVE-2017-5569 An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the template.jsp, which can be exploited … Patient Portal Mitigation only Fix from $2,3002017-01-23 HIGH 8.8 CVE-2017-5570 An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the messageJson.jsp, which can only be ex… Patient Portal Mitigation only Fix from $1,9502017-01-23 CRITICAL 9.8 CVE-2015-4594EPSS 6% eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the application does not assign a … Population Health No fix yet Fix from $2,3002017-01-10 HIGH 8.8 CVE-2015-4592 eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users … Population Health No fix yet Fix from $1,9502017-01-10 HIGH 8.8 CVE-2015-4593 eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote a… Population Health No fix yet Fix from $1,9502017-01-10 MEDIUM 6.1 CVE-2015-4591EPSS 5% eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to i… Population Health No fix yet Fix from $1,6002017-01-10