openclinic ga project openclinic ga

Name: openclinic ga project openclinic ga
Brand: openclinic ga project

productUS

cpe:2.3:a:openclinic_ga_project:openclinic_ga:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

13critical16high2medium0low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-40279US	—	3.38% (89th)	Exploit	no fix	2024-03-19	= 5.247.01
CVE-2023-40278US	—	3.00% (87th)	Exploit	no fix	2024-03-19	= 5.247.01
CVE-2020-27227US	critical9.8	2.89% (87th)	—	no fix	2021-04-13	= 5.173.3
CVE-2020-14485US	critical9.8OT elevated	2.54% (85th)	—	no fix	2020-07-20	2 versions
CVE-2020-14490US	high8.8	2.46% (84th)	—	no fix	2020-07-29	2 versions
CVE-2020-14493US	high8.8	1.68% (77th)	—	no fix	2020-07-29	2 versions
CVE-2021-37364US	high7.8	1.32% (71st)	—	no fix	2021-10-26	= 5.194.18
CVE-2020-14494US	critical9.8	1.31% (70th)	—	no fix	2020-07-20	2 versions
CVE-2020-14486US	high8.8OT elevated	1.28% (70th)	—	no fix	2020-07-29	2 versions
CVE-2020-14484US	critical9.8	1.24% (69th)	—	no fix	2020-07-20	2 versions
CVE-2020-14492US	medium6.1	1.22% (68th)	—	no fix	2020-07-29	2 versions
CVE-2020-27232US	high8.8	1.04% (64th)	—	no fix	2021-05-10	= 5.173.3
CVE-2020-27226US	high8.8	1.04% (64th)	—	no fix	2021-05-10	= 5.173.3
CVE-2020-14489US	high7.5	0.98% (62nd)	—	no fix	2020-07-29	2 versions
CVE-2023-40275US	—	0.92% (60th)	—	no fix	2024-03-19	= 5.247.01
CVE-2020-27236US	critical9.8	0.88% (59th)	—	no fix	2021-04-13	= 5.173.3
CVE-2020-27235US	critical9.8	0.88% (59th)	—	no fix	2021-04-13	= 5.173.3
CVE-2020-27234US	critical9.8	0.88% (59th)	—	no fix	2021-04-13	= 5.173.3
CVE-2020-27233US	critical9.8	0.88% (59th)	—	no fix	2021-04-13	= 5.173.3
CVE-2020-27241US	critical9.8	0.87% (58th)	—	no fix	2021-04-19	= 5.173.3
CVE-2020-27240US	critical9.8	0.87% (58th)	—	no fix	2021-04-19	= 5.173.3
CVE-2020-27239US	critical9.8	0.87% (58th)	—	no fix	2021-04-15	= 5.173.3
CVE-2020-27238US	critical9.8	0.87% (58th)	—	no fix	2021-04-15	= 5.173.3
CVE-2020-27237US	critical9.8	0.87% (58th)	—	no fix	2021-04-15	= 5.173.3
CVE-2023-40280US	—	0.85% (58th)	—	no fix	2024-03-19	= 5.247.01
CVE-2020-14491US	medium6.5OT elevated	0.84% (58th)	—	no fix	2020-07-20	2 versions
CVE-2020-27246US	high8.8	0.81% (57th)	—	no fix	2021-05-11	= 5.173.3
CVE-2020-27245US	high8.8	0.81% (57th)	—	no fix	2021-05-11	= 5.173.3
CVE-2020-27244US	high8.8	0.81% (57th)	—	no fix	2021-05-11	= 5.173.3
CVE-2020-27243US	high8.8	0.81% (57th)	—	no fix	2021-05-11	= 5.173.3
CVE-2020-27242US	high8.8	0.81% (57th)	—	no fix	2021-05-11	= 5.173.3
CVE-2020-27231US	high8.8	0.81% (57th)	—	no fix	2021-05-10	= 5.173.3
CVE-2020-27230US	high8.8	0.81% (57th)	—	no fix	2021-05-10	= 5.173.3
CVE-2020-27229US	high8.8	0.81% (57th)	—	no fix	2021-05-10	= 5.173.3
CVE-2020-27228US	high7.8OT elevated	0.76% (55th)	—	no fix	2021-04-13	= 5.173.3
CVE-2023-40276US	—	0.74% (54th)	—	no fix	2024-03-19	= 5.247.01
CVE-2023-40277US	—	0.45% (39th)	—	no fix	2024-03-19	= 5.247.01

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')19 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-285Improper Authorization2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-250Execution with Unnecessary Privileges1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan