Vulnerabilities in openemr

131 results
Vexday analysis

O OpenEMR acumula 120 CVEs catalogadas, com 7 classificadas como críticas e nenhuma confirmada em exploração ativa no catálogo CISA KEV, taxa abaixo da média geral do catálogo. Apesar da ausência de exploração ativa confirmada, o cenário merece atenção: CVE-2023-2948 apresenta score EPSS de 0,9673, indicando probabilidade muito elevada de exploração nos próximos 30 dias e devendo ser tratada como prioridade imediata de remediação. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), o que sugere fragilidades persistentes no tratamento de entradas do usuário na aplicação. A existência de PoC pública para ao menos uma vulnerabilidade eleva o risco operacional, especialmente em ambientes de saúde onde o sistema frequentemente lida com dados sensíveis de pacientes.

CVE-2022-2731MEDIUMCross-site Scripting (XSS) - Reflected in openemr/openemrEPSS 0.6%CVE-2022-4503MEDIUMCross-site Scripting (XSS) - Generic in openemr/openemrEPSS 0.6%CVE-2022-4733MEDIUMCross-site Scripting (XSS) - Stored in openemr/openemrEPSS 0.6%CVE-2023-2950MEDIUMImproper Authorization in openemr/openemrEPSS 0.6%CVE-2026-24898CRITICALOpenEMR has an Unauthenticated MedEx Token DisclosureEPSS 0.6%CVE-2026-40506HIGHOpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.phpEPSS 0.6%CVE-2026-25928MEDIUMOpenEMR Vulnerable to Path Traversal When Zipping DICOM FoldersEPSS 0.5%CVE-2022-2729MEDIUMCross-site Scripting (XSS) - DOM in openemr/openemrEPSS 0.5%CVE-2026-67611HIGHOpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART ConfigurationEPSS 0.5%CVE-2023-2566HIGHCross-site Scripting (XSS) - Stored in openemr/openemrEPSS 0.5%CVE-2026-24908CRITICALOpenEMR has SQL Injection in Patient API Sort ParameterEPSS 0.5%CVE-2023-2946MEDIUMImproper Access Control in openemr/openemrEPSS 0.5%CVE-2026-29187HIGHOpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.phpEPSS 0.5%CVE-2025-31117MEDIUMOpenEMR Out-of-Band Server-Side Request Forgery (OOB SSRF) VulnerabilityEPSS 0.5%CVE-2023-2944MEDIUMImproper Access Control in openemr/openemrEPSS 0.4%CVE-2026-33917HIGHOpenEMR has SQL Injection in CAMOS FormEPSS 0.4%CVE-2026-33301HIGHOpenEMR has arbitrary image file read via PDF generatorEPSS 0.4%CVE-2026-25146CRITICALOpenEMR's payments gateway_api_key secret rendered into client JS codeEPSS 0.4%CVE-2026-39931HIGHOpenEMR Authenticated SQL Injection via backup.php Import FeatureEPSS 0.4%CVE-2023-2945MEDIUMMissing Authorization in openemr/openemrEPSS 0.4%