cve.bz

open-emr openemr vulnerabilities in 2026, newest first, page 3

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 8.5CVE-2025-67491EPSS 0.3%

    OpenEMR is a free and open source electronic health records and medical practice management application. Versions 5.0.0.5 through 7.0.3.4 have a stored cross-site scripting vulnerability in the ub04 helper of the billing interface. The var…

  2. 8.8CVE-2025-67645EPSS 0.4%

    OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request…

  3. 7.1CVE-2025-54373EPSS 0.4%

    OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a vulnerability where sensitive data is unintentionally revealed to unauthorized parties. Contents of Cli…

  4. 4.8CVE-2021-47817EPSS 0.8%

    OpenEMR 5.0.2.1 contains a cross-site scripting vulnerability in user profile parameters that authenticated attackers can chain with a file upload to achieve remote code execution. Attackers can exploit the vulnerability by crafting a mali…