agentprime: openemr-openemrEvery new CVE for openemr-openemr.https://agentprime.io/CVE-2024-0875: Stored XSS in openemr/openemrhttps://agentprime.io/advisories/CVE-2024-0875/https://agentprime.io/advisories/CVE-2024-0875/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 Nov 2024 10:57:25 GMTCVECVE-2023-2950: Improper Authorization in openemr/openemrhttps://agentprime.io/advisories/CVE-2023-2950/https://agentprime.io/advisories/CVE-2023-2950/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 28 May 2023 00:00:00 GMTCVECVE-2023-2949: Cross-site Scripting (XSS) - Reflected in openemr/openemrhttps://agentprime.io/advisories/CVE-2023-2949/https://agentprime.io/advisories/CVE-2023-2949/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 28 May 2023 00:00:00 GMTCVECVE-2023-2948: Cross-site Scripting (XSS) - Generic in openemr/openemrhttps://agentprime.io/advisories/CVE-2023-2948/https://agentprime.io/advisories/CVE-2023-2948/CVSS 8.3 (High). Critical: CVSS score 8.3 (7.0 or more) and EPSS 0.97 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Sun, 28 May 2023 00:00:00 GMTCVEcriticalCVE-2023-2947: Cross-site Scripting (XSS) - Stored in openemr/openemrhttps://agentprime.io/advisories/CVE-2023-2947/https://agentprime.io/advisories/CVE-2023-2947/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 May 2023 00:00:00 GMTCVECVE-2023-2946: Improper Access Control in openemr/openemrhttps://agentprime.io/advisories/CVE-2023-2946/https://agentprime.io/advisories/CVE-2023-2946/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 May 2023 00:00:00 GMTCVECVE-2023-2945: Missing Authorization in openemr/openemrhttps://agentprime.io/advisories/CVE-2023-2945/https://agentprime.io/advisories/CVE-2023-2945/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 May 2023 00:00:00 GMTCVECVE-2023-2944: Improper Access Control in openemr/openemrhttps://agentprime.io/advisories/CVE-2023-2944/https://agentprime.io/advisories/CVE-2023-2944/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 May 2023 00:00:00 GMTCVECVE-2023-2943: Code Injection in openemr/openemrhttps://agentprime.io/advisories/CVE-2023-2943/https://agentprime.io/advisories/CVE-2023-2943/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 May 2023 00:00:00 GMTCVECVE-2023-2942: Improper Input Validation in openemr/openemrhttps://agentprime.io/advisories/CVE-2023-2942/https://agentprime.io/advisories/CVE-2023-2942/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 27 May 2023 00:00:00 GMTCVECVE-2023-2674: Improper Access Control in openemr/openemrhttps://agentprime.io/advisories/CVE-2023-2674/https://agentprime.io/advisories/CVE-2023-2674/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 May 2023 00:00:00 GMTCVECVE-2023-2566: Cross-site Scripting (XSS) - Stored in openemr/openemrhttps://agentprime.io/advisories/CVE-2023-2566/https://agentprime.io/advisories/CVE-2023-2566/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 May 2023 00:00:00 GMTCVECVE-2022-4733: Cross-site Scripting (XSS) - Stored in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-4733/https://agentprime.io/advisories/CVE-2022-4733/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 24 Dec 2022 00:00:00 GMTCVECVE-2022-4615: Cross-site Scripting (XSS) - Reflected in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-4615/https://agentprime.io/advisories/CVE-2022-4615/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Dec 2022 00:00:00 GMTCVECVE-2022-4567: Improper Access Control in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-4567/https://agentprime.io/advisories/CVE-2022-4567/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Dec 2022 00:00:00 GMTCVECVE-2022-4506: Unrestricted Upload of File with Dangerous Type in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-4506/https://agentprime.io/advisories/CVE-2022-4506/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Dec 2022 00:00:00 GMTCVECVE-2022-4505: Authorization Bypass Through User-Controlled Key in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-4505/https://agentprime.io/advisories/CVE-2022-4505/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Dec 2022 00:00:00 GMTCVECVE-2022-4504: Improper Input Validation in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-4504/https://agentprime.io/advisories/CVE-2022-4504/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Dec 2022 00:00:00 GMTCVECVE-2022-4503: Cross-site Scripting (XSS) - Generic in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-4503/https://agentprime.io/advisories/CVE-2022-4503/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Dec 2022 00:00:00 GMTCVECVE-2022-4502: Cross-site Scripting (XSS) - Reflected in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-4502/https://agentprime.io/advisories/CVE-2022-4502/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Dec 2022 00:00:00 GMTCVECVE-2022-2824: Authorization Bypass Through User-Controlled Key in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-2824/https://agentprime.io/advisories/CVE-2022-2824/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Aug 2022 15:50:09 GMTCVECVE-2022-2734: Improper Restriction of Rendered UI Layers or Frames in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-2734/https://agentprime.io/advisories/CVE-2022-2734/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Aug 2022 12:30:18 GMTCVEcriticalCVE-2022-2732: Missing Authorization in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-2732/https://agentprime.io/advisories/CVE-2022-2732/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Aug 2022 12:06:13 GMTCVECVE-2022-2733: Cross-site Scripting (XSS) - Reflected in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-2733/https://agentprime.io/advisories/CVE-2022-2733/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. CVSS score 9.6 (7.0 or more) and EPSS 0.96 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Aug 2022 12:05:11 GMTCVEcriticalCVE-2022-2731: Cross-site Scripting (XSS) - Reflected in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-2731/https://agentprime.io/advisories/CVE-2022-2731/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Aug 2022 12:00:19 GMTCVECVE-2022-2729: Cross-site Scripting (XSS) - DOM in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-2729/https://agentprime.io/advisories/CVE-2022-2729/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Aug 2022 11:55:25 GMTCVECVE-2022-2730: Authorization Bypass Through User-Controlled Key in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-2730/https://agentprime.io/advisories/CVE-2022-2730/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Aug 2022 11:55:10 GMTCVECVE-2022-2494: Cross-site Scripting (XSS) - Stored in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-2494/https://agentprime.io/advisories/CVE-2022-2494/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Jul 2022 03:48:01 GMTCVECVE-2022-2493: Data Access from Outside Expected Data Manager Component in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-2493/https://agentprime.io/advisories/CVE-2022-2493/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Jul 2022 03:47:17 GMTCVECVE-2022-1461: Non Privilege User can Enable or Disable Registered in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-1461/https://agentprime.io/advisories/CVE-2022-1461/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Apr 2022 10:15:12 GMTCVECVE-2022-1459: Non-Privilege User Can View Patient’s Disclosures in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-1459/https://agentprime.io/advisories/CVE-2022-1459/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Apr 2022 09:55:10 GMTCVECVE-2022-1458: Stored XSS Leads To Session Hijacking in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-1458/https://agentprime.io/advisories/CVE-2022-1458/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 Apr 2022 09:50:10 GMTCVECVE-2022-1179: Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-1179/https://agentprime.io/advisories/CVE-2022-1179/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Mar 2022 11:05:28 GMTCVECVE-2022-1180: Reflected Cross Site Scripting in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-1180/https://agentprime.io/advisories/CVE-2022-1180/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Mar 2022 11:05:20 GMTCVECVE-2022-1181: Stored Cross Site Scripting in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-1181/https://agentprime.io/advisories/CVE-2022-1181/CVSS 8.0 (High). Critical: CVSS score 8.0 (7.0 or more) and EPSS 0.51 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Mar 2022 11:05:13 GMTCVEcriticalCVE-2022-1177: Accounting User Can Download Patient Reports in openemr in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-1177/https://agentprime.io/advisories/CVE-2022-1177/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Mar 2022 11:00:28 GMTCVECVE-2022-1178: Stored Cross Site Scripting in openemr/openemrhttps://agentprime.io/advisories/CVE-2022-1178/https://agentprime.io/advisories/CVE-2022-1178/CVSS 7.3 (High). Critical: CVSS score 7.3 (7.0 or more) and EPSS 0.52 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Mar 2022 11:00:20 GMTCVEcritical