Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Open-Emr

218 known vulnerabilities

16
CRITICAL
90
HIGH
103
MEDIUM
2
LOW

Top Products

openemr 211
211 CVEs · Page 2/5
6.5
CVE-2026-25929

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

7.1
CVE-2026-25927

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

8.8
CVE-2026-25746

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior

4.8
CVE-2026-25743

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

7.5
CVE-2026-25476

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

6.5
CVE-2026-25220

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

8.1
CVE-2026-25164

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

9.9
CVE-2026-24908

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

8.1
CVE-2026-24890

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

6.5
CVE-2026-24487

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

8.8
CVE-2026-23627

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

4.5
CVE-2026-25135

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior

8.8
CVE-2026-25131

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

6.5
CVE-2026-25127

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

6.5
CVE-2026-25124

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

6.5
CVE-2026-24896

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

9.9
CVE-2026-24849

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

6.1
CVE-2026-24847

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

6.1
CVE-2026-21443

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

8.7
CVE-2025-69231

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

5.0
CVE-2025-68277

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

8.1
CVE-2025-67752

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to versio

5.4
CVE-2025-67491

OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.

8.8
CVE-2025-67645

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior

6.5
CVE-2025-54373

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior

5.4
CVE-2021-47817

OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers ca

8.8
CVE-2013-10044

An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to

7.6
CVE-2025-43860

OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-

5.4
CVE-2025-32967

OpenEMR is a free and open source electronic health records and medical practice management application. A logging overs

7.6
CVE-2025-32794

OpenEMR is a free and open source electronic health records and medical practice management application. A stored cross-

9.8
CVE-2024-22611

OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.cl

5.4
CVE-2025-31121

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.

7.5
CVE-2025-31117

OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band

5.4
CVE-2025-30161

OpenEMR is a free and open source electronic health records and medical practice management application. A stored XSS vu

6.4
CVE-2025-30149

OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows

6.1
CVE-2025-29772

OpenEMR is a free and open source electronic health records and medical practice management application. The POST parame

7.5
CVE-2025-29789

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior

4.8
CVE-2024-0875

A stored cross-site scripting (XSS) vulnerability exists in openemr/openemr version 7.0.1. An attacker can inject malici

9.8
CVE-2024-37734

An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid par

3.5
CVE-2024-26476

An issue in open-emr before v.7.0.2 allows a remote attacker to escalate privileges via a crafted script to the formid p

8.1
CVE-2023-2950

Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1.

6.1
CVE-2023-2949

Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1.

6.1
CVE-2023-2948

Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior to 7.0.1.

4.8
CVE-2023-2947

Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1.

8.1
CVE-2023-2946

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

5.4
CVE-2023-2945

Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1.

5.4
CVE-2023-2944

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

8.8
CVE-2023-2943

Code Injection in GitHub repository openemr/openemr prior to 7.0.1.

8.1
CVE-2023-2942

Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1.

4.3
CVE-2023-2674

Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

Frequently Asked Questions

How many CVEs affect Open-Emr?

Open-Emr has 218 CVE records in our database, including 16 critical and 90 high severity vulnerabilities.

What are the most severe Open-Emr vulnerabilities?

Open-Emr has 16 critical severity (CVSS 9.0+) and 90 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.

How can I scan for Open-Emr vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Open-Emr products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Open-Emr Vulnerabilities

CyberStrike scans your infrastructure for Open-Emr vulnerabilities and provides real-time remediation guidance.

Get Started