openemr güvenlik açıkları
openemr
- Toplam açık
- 17
- Kritik
- 1
- Aktif istismar
- 0
- Yaması çıkan
- 16
- Son açık
- 4 sa önce
Önem dağılımı
- Kritik 1
- Yüksek 8
- Orta 8
- Düşük 0
Son açıklar
8 açık
- 5,3Orta CVE-2026-103021 OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading
- 5,3Orta CVE-2026-103020Yama var OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions
- 4,3Orta CVE-2026-103019Yama var OpenEMR: Unauthenticated Open Redirect via OIDC End Session Endpoint
- 6,5Orta CVE-2026-104134Yama var OpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email)
- 5,4Orta CVE-2026-103939Yama var OpenEMR: Weno `file_download.php`: missing ACL/CSRF truncates the e-prescribing pharmacy directory
- 6,5Orta CVE-2026-104138Yama var OpenEMR: Missing authorization on QRDA Category I/III download endpoints
- 6,5Orta CVE-2026-104135Yama var OpenEMR: Missing authorization in payment patient-search AJAX leaks patient directory and dates of birth
- 6,5Orta CVE-2026-104139Yama var OpenEMR: Missing Authorization on Document Template Download Endpoint Allows Any Authenticated User to Read Another Patient's PHI