Vulnerability index

Browse CVEs

192 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Openemr MEDIUM 6.5
CVE-2026-25127

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the server does not …

Fix: 8.0.0+
Fix from $1,600 2026-02-25
Openemr MEDIUM 6.1
CVE-2026-24847

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Eye Exam form mo…

Fix: 8.0.0+
Fix from $1,600 2026-02-25
Openemr HIGH 8.1
CVE-2025-67752

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, OpenEMR's HTTP clien…

Fix: 7.0.4+
Fix from $1,950 2026-02-25
Openemr MEDIUM 6.1
CVE-2026-21443

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the `xl()` translati…

Fix: 8.0.0+
Fix from $1,600 2026-02-25
Openemr MEDIUM 5.4
CVE-2025-69231

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, a stored cross-site …

Fix: 8.0.0+
Fix from $1,600 2026-02-25
Openemr MEDIUM 5.0
CVE-2025-68277

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, when a link is sent …

Fix: 7.0.4+
Fix from $1,600 2026-02-25
Openemr MEDIUM 5.4
CVE-2025-67491

OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.5 through 7.0.3.4 have a stor…

Fix: 7.0.4+
Fix from $1,600 2026-02-25
Openemr HIGH 8.8
CVE-2025-67645

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access…

Patch available
Fix from $1,950 2026-01-28
Openemr MEDIUM 6.5
CVE-2025-54373

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a vulnerability…

Patch available
Fix from $1,600 2026-01-28
Openemr MEDIUM 5.4
CVE-2021-47817

OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers can chain with a file upload to…

Patch available
Fix from $1,600 2026-01-21
Openemr HIGH 8.8
CVE-2013-10044

An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator creden…

Fix: after 4.1.1
Fix from $1,950 2025-08-01
Openemr HIGH 7.6
CVE-2025-32794EPSS 9%

OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting (XSS) vulnerab…

Fix: 7.0.3.4+
Fix from $1,950 2025-05-23
Openemr HIGH 7.6
CVE-2025-43860EPSS 9%

OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-site scripting (XSS) vulnerab…

Fix: 7.0.3.4+
Fix from $1,950 2025-05-23
Openemr MEDIUM 5.4
CVE-2025-32967

OpenEMR is a free and open source electronic health records and medical practice management application. A logging oversight in versions prior to 7.0…

Fix: 7.0.3.4+
Fix from $1,600 2025-05-23
Openemr CRITICAL 9.8
CVE-2024-22611EPSS 6%

OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controll…

No fix yet
Fix from $2,300 2025-04-03
Openemr MEDIUM 5.4
CVE-2025-31121EPSS 15%

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature …

Fix: 7.0.3.1+
Fix from $1,600 2025-04-01
Openemr HIGH 7.5
CVE-2025-31117

OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery (…

Fix: 7.0.3.1+
Fix from $1,950 2025-03-31
Openemr MEDIUM 5.4
CVE-2025-30161EPSS 10%

OpenEMR is a free and open source electronic health records and medical practice management application. A stored XSS vulnerability in the Bronchitis…

Fix: 7.0.3+
Fix from $1,600 2025-03-31
Openemr MEDIUM 6.1
CVE-2025-29772

OpenEMR is a free and open source electronic health records and medical practice management application. The POST parameter hidden_subcategory is out…

Fix: 7.0.3+
Fix from $1,600 2025-03-31
Openemr HIGH 7.5
CVE-2025-29789

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Di…

Fix: 7.0.3+
Fix from $1,950 2025-03-25
Openemr CRITICAL 9.8
CVE-2024-37734

An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid parameter.

Patch available
Fix from $2,300 2024-06-26
Openemr HIGH 8.1
CVE-2023-2950

Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1.

Fix: 7.0.1+
Fix from $1,950 2023-05-28
Openemr MEDIUM 6.1
CVE-2023-2949

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1.

Fix: 7.0.1+
Fix from $1,600 2023-05-28
Openemr MEDIUM 6.1
CVE-2023-2948EPSS 97%

Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1.

Fix: 7.0.1+
Fix from $1,600 2023-05-28
Openemr HIGH 8.1
CVE-2023-2946

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

Fix: 7.0.1+
Fix from $1,950 2023-05-27
Openemr HIGH 8.8
CVE-2023-2943

Code Injection in GitHub repository openemr/openemr prior to 7.0.1.

Fix: 7.0.1+
Fix from $1,950 2023-05-27
Openemr MEDIUM 5.4
CVE-2023-2944

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

Fix: 7.0.1+
Fix from $1,600 2023-05-27
Openemr MEDIUM 5.4
CVE-2023-2945

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1.

Fix: 7.0.1+
Fix from $1,600 2023-05-27
Openemr HIGH 8.1
CVE-2023-2942

Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1.

Fix: 7.0.1+
Fix from $1,950 2023-05-27
Openemr HIGH 8.8
CVE-2023-22973

A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0 allows remote authenticated users to execute code via th…

Fix: 7.0.0+
Fix from $1,950 2023-02-22