Vulnerabilities in dhis2
14 resultsCVE-2021-39179HIGHSQL Injection in DHIS2 Tracker APIEPSS 1.9%CVE-2022-24848HIGHSQL Injection in DHIS2's in OrgUnit program associationEPSS 1.2%CVE-2021-41187HIGHSQL Injection in DHIS2 Tracker APIEPSS 0.9%CVE-2021-32704HIGHImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in dhis2-coreEPSS 0.8%CVE-2022-41948MEDIUMPrivilege Chaining with the user admin role in dhis2-coreEPSS 0.6%CVE-2023-31139MEDIUMDHIS2 Core unrestricted session cookies with Personal Access TokensEPSS 0.6%CVE-2023-31138HIGHDHIS2 Core vulnerable to Improper Access Control with PATCH requestsEPSS 0.6%CVE-2026-55082HIGHDHIS2 SQL injection in SQL View filter valuesEPSS 0.6%CVE-2026-55083CRITICALDHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE)EPSS 0.6%CVE-2023-32060MEDIUMDHIS2 Core Improper Access Control with Category Option Combination sharing in /api/trackedEntityInstance and /api/eventsEPSS 0.5%CVE-2026-55084HIGHSQL Injection in SqlView Filter Parameter Leading to Arbitrary Database ReadEPSS 0.5%CVE-2026-55081HIGHDHIS2 Reflected XSS in OpenAPI HTML scope parameterEPSS 0.4%CVE-2022-41949MEDIUMSemi-blind Server-Side Request Forgery in dhis2-coreEPSS 0.4%CVE-2022-41947MEDIUMCross-site Scripting with user-uploaded files in dhis2-core EPSS 0.4%