Open-Emr Openemr vulnerabilities

CVE-2020-29142 [HIGH] CWE-89 CVE-2020-29142: A SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.5 a A SQL injection vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the schedule_facility parameter when restrict_user_facility=on is in global settings.

CVE-2020-29140 [HIGH] CWE-89 CVE-2020-29140: A SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0.2.5 A SQL injection vulnerability in interface/reports/immunization_report.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the form_code parameter.

CVE-2020-29139 [HIGH] CWE-89 CVE-2020-29139: A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc i A SQL injection vulnerability in interface/main/finder/patient_select.php from library/patient.inc in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the searchFields parameter.

CVE-2026-33914 [HIGH] CWE-89 CVE-2026-33914: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the PostCalendar module contains a blind SQL injection vulnerability in the `categoriesUpdate` administrative function. The `dels` POST parameter is read via `pnVarCleanFromInput()`, which only strips HTML tags and performs

CVE-2025-67752 [HIGH] CWE-295 CVE-2025-67752: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, OpenEMR's HTTP client wrapper (`oeHttp`/`oeHttpRequest`) disables SSL/TLS certificate verification by default (`verify: false`), making all external HTTPS connections vulnerable to man-in-the-middle (MITM) attacks. This affe

CVE-2020-29143 [HIGH] CWE-89 CVE-2020-29143: A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows A SQL injection vulnerability in interface/reports/non_reported.php in OpenEMR before 5.0.2.5 allows a remote authenticated attacker to execute arbitrary SQL commands via the form_code parameter.

CVE-2025-31117 [HIGH] CWE-918 CVE-2025-31117: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery (OOB SSRF) vulnerability was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal resources. this attack does not return a direct response b

CVE-2026-24488 [MEDIUM] CWE-22 CVE-2026-24488: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. In versions up to and including 8.0.0, an arbitrary file exfiltration vulnerability in the fax sending endpoint allows any authenticated user to read and transmit any file on the server (including database credentials, patient documents, system fi

CVE-2022-2732 [HIGH] CWE-862 CVE-2022-2732: Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1. Missing Authorization in GitHub repository openemr/openemr prior to 7.0.0.1.

CVE-2023-2942 [HIGH] CWE-20 CVE-2023-2942: Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1. Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1.

CVE-2022-4567 [HIGH] CWE-284 CVE-2022-4567: Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.2. Improper Access Control in GitHub repository openemr/openemr prior to 7.0.0.2.

CVE-2023-2946 [HIGH] CWE-284 CVE-2023-2946: Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

CVE-2025-29789 [HIGH] CWE-23 CVE-2025-29789: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.3.0 are vulnerable to Directory Traversal in the Load Code feature. Version 7.3.0 contains a patch for the issue.

CVE-2017-1000241 [HIGH] CWE-269 CVE-2017-1000241: The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalat The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. This vulnerability can allow an authenticated non-administrator users to view and modify information only accessible to administrators.

CVE-2023-2950 [HIGH] CWE-285 CVE-2023-2950: Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1. Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1.

CVE-2026-32118 [CRITICAL] CWE-79 CVE-2026-32118: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, stored cross-site scripting (XSS) in the Graphical Pain Map ("clickmap") form allows any authenticated clinician to inject arbitrary JavaScript that executes in the browser of every subsequent user who views the affected encoun

CVE-2026-32120 [MEDIUM] CWE-639 CVE-2026-32120: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an Insecure Direct Object Reference (IDOR) vulnerability in the fee sheet product save logic (`library/FeeSheet.class.php`) allows any authenticated user with fee sheet ACL access to delete, modify, or read `drug_sales`

CVE-2022-1459 [HIGH] CWE-1118 CVE-2022-1459: Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1. Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1.

CVE-2013-4620 [MEDIUM] CWE-79 CVE-2013-4620: Cross-site scripting (XSS) vulnerability in interface/main/onotes/office_comments_full.php in OpenEM Cross-site scripting (XSS) vulnerability in interface/main/onotes/office_comments_full.php in OpenEMR 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the note parameter.

CVE-2026-33931 [MEDIUM] CWE-639 CVE-2026-33931: OpenEMR is a free and open source electronic health records and medical practice management applicat OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an Insecure Direct Object Reference (IDOR) vulnerability in the patient portal payment page allows any authenticated portal patient to access other patients' payment records — including invoice/billing data (PHI) and pay