Vulnerabilities in openemr

131 results
Vexday analysis

O OpenEMR acumula 120 CVEs catalogadas, com 7 classificadas como críticas e nenhuma confirmada em exploração ativa no catálogo CISA KEV, taxa abaixo da média geral do catálogo. Apesar da ausência de exploração ativa confirmada, o cenário merece atenção: CVE-2023-2948 apresenta score EPSS de 0,9673, indicando probabilidade muito elevada de exploração nos próximos 30 dias e devendo ser tratada como prioridade imediata de remediação. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), o que sugere fragilidades persistentes no tratamento de entradas do usuário na aplicação. A existência de PoC pública para ao menos uma vulnerabilidade eleva o risco operacional, especialmente em ambientes de saúde onde o sistema frequentemente lida com dados sensíveis de pacientes.

CVE-2026-32123HIGHOpenEMR: Therapy Group Sensitivity ACL No Longer EnforcedEPSS 0.3%CVE-2025-67491HIGHOpenEMR has Stored XSS in ub04 helperEPSS 0.2%CVE-2026-33918HIGHOpenEMR Missing Authorization on Claim File Download EndpointEPSS 0.2%CVE-2026-33303MEDIUMOpenEMR Vulnerable to Stored XSS via Unescaped portal_login_username in Credential Print ViewEPSS 0.2%CVE-2026-24890HIGHOpenEMR Portal Users Can Forge Provider SignaturesEPSS 0.2%CVE-2026-33934MEDIUMOpenEMR's Missing Authorization in show-signature.php Allows Portal Patients to Read Staff SignaturesEPSS 0.2%CVE-2025-67752HIGHOpenEMR Has Disabled SSL Certificate Verification in HTTP ClientEPSS 0.2%CVE-2026-32122MEDIUMOpenEMR: Missing Authorization on Claim File Tracker UI and AJAX Endpoint (V2)EPSS 0.2%CVE-2026-33911MEDIUMOpenEMR vulnerable to reflected XSS in graphs.php via title parameterEPSS 0.2%CVE-2026-33915MEDIUMOpenEMR Missing ACL Checks on Insurance Company API RoutesEPSS 0.2%CVE-2026-25147HIGHOpenEMR's Portal Payment Endpoint Trusts User-Controlled pidEPSS 0.2%CVE-2026-33912MEDIUMOpenEMR has reflected XSS in ajax_download.php via reportID parameterEPSS 0.2%CVE-2026-25135MEDIUMOpenEMR's location resource for Group.$export operation returns entire patient/user population contact informationEPSS 0.2%CVE-2026-25744MEDIUMOpenEMR: POST /api/.../vital Accepts Attacker-Supplied id and Overwrites Arbitrary VitalsEPSS 0.2%CVE-2026-34051MEDIUMOpenEMR has Improper ACL On Import/Export PopupEPSS 0.2%CVE-2026-33305MEDIUMOpenEMR has Authorization Bypass in FaxSMS AppDispatch ConstructorEPSS 0.2%CVE-2026-40508MEDIUMOpenEMR < 8.3.0 Stored XSS via Patient Portal Template Import HandlerEPSS 0.2%CVE-2026-46518HIGHOpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographicsEPSS 0.2%CVE-2026-25927HIGHOpenEMR Missing Authorization Checks in DICOM Viewer State APIEPSS 0.2%CVE-2026-32121HIGHOpenEMR: Stored DOM XSS via `.html()` in Portal Signer ModalEPSS 0.2%