VendorsOpenMRSreference_applicationall versions
Vulnerabilities

OpenMRS Reference Application

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2018-16521
An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0.
Published 2018-09-05 · Modified
9.8EPSS 0.019
CVE-2021-43094
An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via GET requests on arbitrary parameters in patient.page.
Published 2022-05-10 · Modified
9.8EPSS 0.013
CVE-2021-4289
OpenMRS openmrs-module-referenceapplication User App Page UserAppPageController.java post cross site scripting
Published 2022-12-27 · Modified
6.1EPSS 0.010
CVE-2021-4288
OpenMRS openmrs-module-referenceapplication userApp.gsp cross site scripting
Published 2022-12-27 · Modified
6.1EPSS 0.009