Zafiyet.live Keşfet. Değerlendir. Düzelt. Doğrula.
Menü

openemr güvenlik açıkları

openemr

openemr için bildirim al RSS

Toplam açık
17
Kritik
1
Aktif istismar
0
Yaması çıkan
16
Son açık
2 sa önce
Önem dağılımı
  • Kritik 1
  • Yüksek 8
  • Orta 8
  • Düşük 0

Son açıklar

17 açık

  1. 9,6Kritik CVE-2026-102940Yama var OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment openemrCWE-6392 sa önce
  2. 5,3Orta CVE-2026-103021 OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading openemrCWE-2002 sa önce
  3. 5,3Orta CVE-2026-103020Yama var OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions openemrCWE-2002 sa önce
  4. 4,3Orta CVE-2026-103019Yama var OpenEMR: Unauthenticated Open Redirect via OIDC End Session Endpoint openemrCWE-6012 sa önce
  5. 6,5Orta CVE-2026-104134Yama var OpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email) openemrCWE-8622 sa önce
  6. 5,4Orta CVE-2026-103939Yama var OpenEMR: Weno `file_download.php`: missing ACL/CSRF truncates the e-prescribing pharmacy directory openemrCWE-8623 sa önce
  7. 6,5Orta CVE-2026-104138Yama var OpenEMR: Missing authorization on QRDA Category I/III download endpoints openemrCWE-8623 sa önce
  8. 8,1Yüksek CVE-2026-115573Yama var OpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumeration openemrCWE-8623 sa önce
  9. 7,1Yüksek CVE-2026-104133Yama var OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall openemrCWE-8623 sa önce
  10. 8,1Yüksek CVE-2026-103935Yama var OpenEMR: Stored XSS via `text()` Misuse in Double-Quoted HTML Attribute openemrCWE-793 sa önce
  11. 6,5Orta CVE-2026-104135Yama var OpenEMR: Missing authorization in payment patient-search AJAX leaks patient directory and dates of birth openemrCWE-8623 sa önce
  12. 7,1Yüksek CVE-2026-104136Yama var OpenEMR: Arbitrary Patient Recall and Contact Detail Read openemrCWE-2843 sa önce
  13. 7,1Yüksek CVE-2026-103938Yama var OpenEMR: CSRF Protection Bypass on IPPF Point-of-Sale Void and Regen Operations openemrCWE-3523 sa önce
  14. 7,1Yüksek CVE-2026-104137Yama var OpenEMR: Patient Data Search Without Sufficient ACL openemrCWE-2843 sa önce
  15. 6,5Orta CVE-2026-104139Yama var OpenEMR: Missing Authorization on Document Template Download Endpoint Allows Any Authenticated User to Read Another Patient's PHI openemrCWE-8623 sa önce
  16. 7,5Yüksek CVE-2026-65983Yama var OpenEMR FaxSMS module: insecure staging of decrypted patient documents in webroot openemrCWE-2003 sa önce
  17. 8,8Yüksek CVE-2026-49142Yama var OpenEMR Syndromic Surveillance modülünde SQL enjeksiyonu (8.5.0 öncesi) openemrCWE-8929 Eki 2026