Advisories · Technology
iqonicdesign KiviCare – Clinic & Patient Management System (EHR).
Every CVE that names iqonicdesign KiviCare – Clinic & Patient Management System (EHR) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
KiviCare <= 4.5.1 - Authenticated (Doctor+) SQL Injection via 'searchTerm' Parameter
- iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
- SQL injection
- CVSS 6.5 Medium
KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in KCQueryBuilder
- iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
- SQL injection
- CVSS 6.5 Medium
KiviCare <= 4.5.0 - Authenticated (Doctor+) SQL Injection via 'orderby' Parameter in DoctorSessionController
- iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
- SQL injection
- CVSS 5.3 Medium
KiviCare <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass and Appointment Status Manipulation via /payment-success REST Endpoint
- iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
- Broken access control
- CVSS 8.2 High
KiviCare <= 4.1.2 - Missing Authorization to Unauthenticated Privilege Escalation via Setup Wizard
- iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
- Broken access control
- CVSS 7.3 High
KiviCare – Clinic & Patient Management System (EHR) <= 4.1.2 - Unauthenticated Authentication Bypass via Social Login Token
- iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
- Authentication bypass
- CVSS 5.3 Medium
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.15 - Missing Authorization to Unauthenticated Limited Arbitrary File Upload
- iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
- Broken access control
- CVSS 6.5 Medium
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.7 - Authenticated (Doctor+) SQL Injection via 'u_id' Parameter
- iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
- SQL injection
- CVSS 6.5 Medium
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Subscriber+) SQL Injection
- iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
- SQL injection
- CVSS 6.5 Medium
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Authenticated (Doctor/Receptionist+) SQL Injection
- iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
- SQL injection
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
KiviCare – Clinic & Patient Management System (EHR) <= 3.6.4 - Unauthenticated SQL Injection
- iqonicdesign KiviCare – Clinic & Patient Management System (EHR)
- SQL injection