Open-Emr
218 known vulnerabilities
Top Products
interface/fax/fax_dispatch.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access restr
interface/patient_file/letter.php in OpenEMR before 5.0.1 allows remote authenticated users to bypass intended access re
Multiple reflected cross-site scripting (XSS) vulnerabilities in OpenEMR before 5.0.1 allow remote attackers to inject a
OpenEMR version 5.0.0 contains a Cross Site Scripting (XSS) vulnerability in open-flash-chart.swf and _posteddata.php th
OpenEMR version 5.0.0 contains a OS Command Injection vulnerability in fax_dispatch.php that can result in OS command in
The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. T
The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting (XSS) vulnerabilities affecting
OpenEMR before 5.0.0 Patch 5 allows unauthenticated remote database copying because setup.php exposes functionality for
The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass i
OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code
Multiple Cross-Site Scripting (XSS) issues were discovered in OpenEMR 5.0.0 and 5.0.1-dev. The vulnerabilities exist due
Frequently Asked Questions
How many CVEs affect Open-Emr?
Open-Emr has 218 CVE records in our database, including 16 critical and 91 high severity vulnerabilities.
What are the most severe Open-Emr vulnerabilities?
Open-Emr has 16 critical severity (CVSS 9.0+) and 91 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Open-Emr vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Open-Emr products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Open-Emr Vulnerabilities
CyberStrike scans your infrastructure for Open-Emr vulnerabilities and provides real-time remediation guidance.
Get Started