OpenEMR openemr/openemr

Name: OpenEMR openemr/openemr
Brand: OpenEMR

ProduktEU

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

KEV-gelistet

öffentlicher Exploit

ungepatcht

kritisch

nach Schweregrad

0critical7high18medium1low

aktualisiert 2026-10-28

Schwachstellen (26)

Zugehörige CVEs.

Sortierung

ID	Schweregrad	EPSS	ausnutzbar	behoben	veröffentlicht	betroffen
CVE-2023-2948US	medium6.1	96.7% (100th)	—	7.0.1	2023-05-28	unspecified → 7.0.1
CVE-2022-2733US	medium6.1	95.9% (100th)	—	7.0.0.1	2022-08-09	unspecified → 7.0.0.1
CVE-2023-2947US	medium4.8	90.4% (100th)	—	7.0.1	2023-05-27	unspecified → 7.0.1
CVE-2022-1179US	medium5.4	76.9% (100th)	—	6.0.0.4	2022-03-30	unspecified → 6.0.0.4
CVE-2022-1178US	medium5.4	51.6% (99th)	—	6.0.0.4	2022-03-30	unspecified → 6.0.0.4
CVE-2022-1181US	medium5.4	51.5% (99th)	—	6.0.0.2	2022-03-30	unspecified → 6.0.0.2
CVE-2023-2949US	medium6.1	1.47% (74th)	—	7.0.1	2023-05-28	unspecified → 7.0.1
CVE-2022-2493US	high8.1	1.14% (66th)	—	7.0.0	2022-07-22	unspecified → 7.0.0
CVE-2022-1459US	high8.3	1.06% (64th)	—	6.1.0.1	2022-04-25	unspecified → 6.1.0.1
CVE-2022-2732US	high8.3OT erhöht	1.04% (64th)	—	7.0.0.1	2022-08-09	unspecified → 7.0.0.1
CVE-2022-1461US	medium6.5	0.90% (60th)	—	6.1.0.1	2022-04-25	unspecified → 6.1.0.1
CVE-2022-1177US	medium4.3OT erhöht	0.88% (59th)	—	6.1.0	2022-03-30	unspecified → 6.1.0
CVE-2022-2734US	medium5.4	0.84% (58th)	—	7.0.0.1	2022-08-09	unspecified → 7.0.0.1
CVE-2022-2730US	medium6.5	0.82% (57th)	—	7.0.0.1	2022-08-09	unspecified → 7.0.0.1
CVE-2023-2942US	high8.1	0.80% (56th)	—	7.0.1	2023-05-27	unspecified → 7.0.1
CVE-2022-2824US	medium5.4	0.75% (55th)	—	7.0.0.1	2022-08-15	unspecified → 7.0.0.1
CVE-2022-1458US	medium5.4	0.71% (53rd)	—	6.1.0.1	2022-04-25	unspecified → 6.1.0.1
CVE-2022-2494US	medium5.4	0.67% (52nd)	—	7.0.0	2022-07-22	unspecified → 7.0.0
CVE-2023-2943US	high8.8	0.62% (50th)	—	7.0.1	2023-05-27	unspecified → 7.0.1
CVE-2022-2731US	medium6.1	0.60% (49th)	—	7.0.0.1	2022-08-09	unspecified → 7.0.0.1
CVE-2022-1180US	low3.5	0.60% (49th)	—	6.0.0.4	2022-03-30	unspecified → 6.0.0.4
CVE-2022-2729US	medium5.4	0.56% (47th)	—	7.0.0.1	2022-08-09	unspecified → 7.0.0.1
CVE-2023-2950US	high8.1	0.56% (46th)	—	7.0.1	2023-05-28	unspecified → 7.0.1
CVE-2023-2946US	high8.1	0.49% (42nd)	—	7.0.1	2023-05-27	unspecified → 7.0.1
CVE-2023-2944US	medium5.4	0.45% (39th)	—	7.0.1	2023-05-27	unspecified → 7.0.1
CVE-2023-2945US	medium5.4OT erhöht	0.43% (37th)	—	7.0.1	2023-05-27	unspecified → 7.0.1

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12 CVEs
CWE-639Authorization Bypass Through User-Controlled Key4 CVEs
CWE-1220Insufficient Granularity of Access Control2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-862Missing Authorization2 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-1083Data Access from Outside Expected Data Manager Component1 CVEs
CWE-1118Insufficient Documentation of Error Handling Techniques1 CVEs

Datenquellen (1)

Welche Quellen diesen Datensatz belegen und wann.

EUEU Vulnerability Database (ENISA)26 CVEs

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan