CVE-2020-14487

9.8 criticalEPSS 2.2%

Critical (9.8) in freemedsoftware openclinic ga. EPSS 2.2% chance of exploitation in the next 30 days.

OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allow an attacker to login and execute arbitrary commands.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-912
Published: 2020-07-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

freemedsoftware:openclinic_ga

References

https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01
https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01

Check your stack JSON