Open-emr

Openemr

221 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2026-24488

Exploit
  • EPSS 0.4%
  • Veröffentlicht 27.02.2026 16:41:45
  • Zuletzt bearbeitet 03.03.2026 18:48:01

OpenEMR is a free and open source electronic health records and medical practice management application. In versions up to and including 8.0.0, an arbitrary file exfiltration vulnerability in the fax sending endpoint allows any authenticated user to ...

6.5

CVE-2026-27943

Exploit
  • EPSS 0.26%
  • Veröffentlicht 26.02.2026 01:30:31
  • Zuletzt bearbeitet 27.02.2026 14:51:27

OpenEMR is a free and open source electronic health records and medical practice management application. In versions up to and including 8.0.0, the eye exam (eye_mag) view loads data by `form_id` (or equivalent) without verifying that the form belong...

6.5

CVE-2026-25930

Exploit
  • EPSS 0.26%
  • Veröffentlicht 25.02.2026 18:48:10
  • Zuletzt bearbeitet 27.02.2026 14:38:24

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Layout-Based Form (LBF) printable view accepts `formid` and `visitid` (or `patientid`) from the request and does not ...

6.5

CVE-2026-25929

Exploit
  • EPSS 0.26%
  • Veröffentlicht 25.02.2026 18:46:44
  • Zuletzt bearbeitet 27.02.2026 14:39:26

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the document controller’s `patient_picture` context serves the patient’s photo by document ID or patient ID without verif...

7.1

CVE-2026-25927

Exploit
  • EPSS 0.2%
  • Veröffentlicht 25.02.2026 18:43:25
  • Zuletzt bearbeitet 27.02.2026 14:40:46

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the DICOM viewer state API (e.g. upload or state save/load) accepts a document ID (`doc_id`) without verifying that the ...

8.8

CVE-2026-25746

Exploit
  • EPSS 3.1%
  • Veröffentlicht 25.02.2026 18:39:24
  • Zuletzt bearbeitet 27.02.2026 14:40:01

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 contain a SQL injection vulnerability in prescription that can be exploited by authenticated attackers. The vulnerability...

4.8

CVE-2026-25743

Exploit
  • EPSS 0.17%
  • Veröffentlicht 25.02.2026 18:33:56
  • Zuletzt bearbeitet 27.02.2026 14:40:33

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, users with the "Forms administration" role can fill questionnaires ("forms") in patient encounters. The answers to the fo...

7.5

CVE-2026-25476

Exploit
  • EPSS 0.31%
  • Veröffentlicht 25.02.2026 18:28:29
  • Zuletzt bearbeitet 28.02.2026 00:42:46

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the session expiration check in `library/auth.inc.php` runs only when `skip_timeout_reset` is not present in the request....

6.5

CVE-2026-25220

Exploit
  • EPSS 0.26%
  • Veröffentlicht 25.02.2026 18:25:06
  • Zuletzt bearbeitet 27.02.2026 14:41:14

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Message Center accepts the URL parameter `show_all=yes` and passes it to `getPnotesByUser()`, which returns all inter...

8.1

CVE-2026-25164

Exploit
  • EPSS 0.26%
  • Veröffentlicht 25.02.2026 18:22:40
  • Zuletzt bearbeitet 27.02.2026 14:41:30

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the REST API route table in `apis/routes/_rest_routes_standard.inc.php` does not call `RestConfig::request_authorization_...