VendorsOpenMRSreference_applicationany version
Vulnerabilities

OpenMRS Reference Application any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2021-43094
An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via GET requests on arbitrary parameters in patient.page.
Published 2022-05-10 · Modified
9.8EPSS 0.013
CVE-2021-4289
OpenMRS openmrs-module-referenceapplication User App Page UserAppPageController.java post cross site scripting
Published 2022-12-27 · Modified
6.1EPSS 0.010
CVE-2021-4288
OpenMRS openmrs-module-referenceapplication userApp.gsp cross site scripting
Published 2022-12-27 · Modified
6.1EPSS 0.009