Advisories · Technology

open source OpenClinic GA.

Every CVE that names open source OpenClinic GA among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-14487 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

OpenClinic GA
- open source OpenClinic GA
- CWE-912
Not analysed yet 29 Jul 2020
CVE-2020-14486 CVE record

CVSS 6.3 Medium

OpenClinic GA
- open source OpenClinic GA
- Broken access control
Not analysed yet 29 Jul 2020
CVE-2020-14488 CVE record

CVSS 8.8 High

OpenClinic GA
- open source OpenClinic GA
- Unrestricted file upload
Not analysed yet 29 Jul 2020
CVE-2020-14492 CVE record

CVSS 5.4 Medium

OpenClinic GA
- open source OpenClinic GA
- Cross-site scripting (XSS)
Not analysed yet 29 Jul 2020
CVE-2020-14493 CVE record

CVSS 8.8 High

OpenClinic GA
- open source OpenClinic GA
- Privilege escalation
Not analysed yet 29 Jul 2020
CVE-2020-14490 CVE record

CVSS 8.8 High

OpenClinic GA
- open source OpenClinic GA
- Path traversal
Not analysed yet 29 Jul 2020
CVE-2020-14489 CVE record

CVSS 6.2 Medium

OpenClinic GA
- open source OpenClinic GA
- Hard-coded credentials
Not analysed yet 29 Jul 2020