CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,111 CVEs published, 233 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,111
Show in the list
Critical, last 7 days
233
Show in the list
Healthcare-tagged, last 7 days
9
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product openemr:openemr. Show all products

138 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2006-2929
Healthcare
Medium 6.8PHP remote file inclusion vulnerability in contrib/forms/evaluation/C_FormEvaluation.class.php in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbit…
Assigned by mitre
Jun 9, 2006
CVE-2006-5795
Healthcare
High 7.5Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the srcdir paramet…
Assigned by mitre
Nov 8, 2006
CVE-2006-5811
Healthcare
Medium 6.8PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[…
Assigned by mitre
Nov 8, 2006
CVE-2007-0649
Healthcare
Medium 4.3Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary program variables and conduct other unauthorized activities, such…
Assigned by mitre
Jan 31, 2007
CVE-2012-0992
Healthcare
High 8.5interface/fax/fax_dispatch.php in OpenEMR 4.1.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the file parameter.
Assigned by mitre
Feb 7, 2012
CVE-2012-0991
Healthcare
Low 3.5Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a ..
Assigned by mitre
Feb 7, 2012
CVE-2022-1178
Healthcare
High 7.3Stored Cross Site Scripting in openemr/openemr
Assigned by @huntrdev
Mar 30, 2022
CVE-2022-1177
Healthcare
Medium 6.5Accounting User Can Download Patient Reports in openemr in openemr/openemr
Assigned by @huntrdev
Mar 30, 2022
CVE-2022-1181
Healthcare
High 8.0Stored Cross Site Scripting in openemr/openemr
Assigned by @huntrdev
Mar 30, 2022
CVE-2022-1180
Healthcare
Medium 4.6Reflected Cross Site Scripting in openemr/openemr
Assigned by @huntrdev
Mar 30, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.