# openemr.

Every CVE that names openemr among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [OpenEMR's Message Update Ignores Patient id](https://agentprime.io/advisories/CVE-2026-25745.md)
  `CVE-2026-25745` · CVE record: openemr openemr · CVSS 6.5 Medium · Not analysed yet · Published 18 Mar 2026 · Tags: Broken access control
- [SQL Injection Vulnerability in ajax graphs library (OpenEMR)](https://agentprime.io/advisories/CVE-2026-32127.md)
  `CVE-2026-32127` · CVE record: openemr openemr · CVSS 8.8 High · Not analysed yet · Published 11 Mar 2026 · Tags: SQL injection
- [OpenEMR: Inverted ACL Condition in CDR ControllerRouter Allows Any Authenticated User to Modify/Delete Clinical Rules and Plans](https://agentprime.io/advisories/CVE-2026-32126.md)
  `CVE-2026-32126` · CVE record: openemr openemr · CVSS 7.1 High · Not analysed yet · Published 11 Mar 2026 · Tags: Broken access control
- [OpenEMR: Stored XSS in Track Anything Graphs via Unescaped Dygraph Titles/Labels](https://agentprime.io/advisories/CVE-2026-32125.md)
  `CVE-2026-32125` · CVE record: openemr openemr · CVSS 5.4 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site scripting (XSS)
- [OpenEMR: Dynamic Code Picker Renders Unescaped Descriptions (Stored XSS)](https://agentprime.io/advisories/CVE-2026-32124.md)
  `CVE-2026-32124` · CVE record: openemr openemr · CVSS 5.4 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site scripting (XSS)
- [OpenEMR: Therapy Group Sensitivity ACL No Longer Enforced](https://agentprime.io/advisories/CVE-2026-32123.md)
  `CVE-2026-32123` · CVE record: openemr openemr · CVSS 7.7 High · Not analysed yet · Published 11 Mar 2026 · Tags: Broken access control
- [OpenEMR: Missing Authorization on Claim File Tracker UI and AJAX Endpoint (V2)](https://agentprime.io/advisories/CVE-2026-32122.md)
  `CVE-2026-32122` · CVE record: openemr openemr · CVSS 4.3 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Broken access control
- [OpenEMR: Stored DOM XSS via \`.html()\` in Portal Signer Modal](https://agentprime.io/advisories/CVE-2026-32121.md)
  `CVE-2026-32121` · CVE record: openemr openemr · CVSS 7.7 High · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site scripting (XSS)
- [OpenEMR has Stored XSS in Graphical Pain Map legend via unescaped annotation text](https://agentprime.io/advisories/CVE-2026-32118.md)
  `CVE-2026-32118` · CVE record: openemr openemr · CVSS 5.4 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: Cross-site scripting (XSS)
- [OpenEMR has an Unauthenticated MedEx Token Disclosure](https://agentprime.io/advisories/CVE-2026-24898.md)
  `CVE-2026-24898` · CVE record: openemr openemr · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Mar 2026 · Tags: Authentication bypass
- [OpenEMR's payments gateway_api_key secret rendered into client JS code](https://agentprime.io/advisories/CVE-2026-25146.md)
  `CVE-2026-25146` · CVE record: openemr openemr · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Mar 2026 · Tags: Information disclosure
- [OpenEMR Arbitrary File Write leading to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-24848.md)
  `CVE-2026-24848` · CVE record: openemr openemr · CVSS 8.7 High · Not analysed yet · Published 3 Mar 2026 · Tags: Path traversal
- [OpenEMR's Portal Payment Endpoint Trusts User-Controlled pid](https://agentprime.io/advisories/CVE-2026-25147.md)
  `CVE-2026-25147` · CVE record: openemr openemr · CVSS 7.1 High · Not analysed yet · Published 27 Feb 2026 · Tags: Broken access control
- [OpenEMR Vulnerable to Arbitrary File Exfiltration via Fax Endpoint](https://agentprime.io/advisories/CVE-2026-24488.md)
  `CVE-2026-24488` · CVE record: openemr openemr · CVSS 6.5 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Path traversal
- [OpenEMR's Eye Exam View Trusts form_id Without Verifying Patient/Encounter Ownership](https://agentprime.io/advisories/CVE-2026-27943.md)
  `CVE-2026-27943` · CVE record: openemr openemr · CVSS 6.5 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: Broken access control
- [OpenEMR's Printable LBF Endpoint Leaks Arbitrary Patient Forms](https://agentprime.io/advisories/CVE-2026-25930.md)
  `CVE-2026-25930` · CVE record: openemr openemr · CVSS 6.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control
- [OpenEMR Patient Picture Context Allows Arbitrary Patient Photo Retrieval](https://agentprime.io/advisories/CVE-2026-25929.md)
  `CVE-2026-25929` · CVE record: openemr openemr · CVSS 6.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control
- [OpenEMR Missing Authorization Checks in DICOM Viewer State API](https://agentprime.io/advisories/CVE-2026-25927.md)
  `CVE-2026-25927` · CVE record: openemr openemr · CVSS 7.1 High · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control
- [OpenEMR has SQL Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-25746.md)
  `CVE-2026-25746` · CVE record: openemr openemr · CVSS 8.8 High · Not analysed yet · Published 25 Feb 2026 · Tags: SQL injection
- [OpenEMR has Stored XSS in Questionnaire answers](https://agentprime.io/advisories/CVE-2026-25743.md)
  `CVE-2026-25743` · CVE record: openemr openemr · CVSS 7.2 High · Not analysed yet · Published 25 Feb 2026 · Tags: Cross-site scripting (XSS)
- [OpenEMR has Session Timeout Bypass via skip_timeout_reset](https://agentprime.io/advisories/CVE-2026-25476.md)
  `CVE-2026-25476` · CVE record: openemr openemr · CVSS 7.5 High · Not analysed yet · Published 25 Feb 2026 · Tags: Authentication bypass
- [OpenEMR Messages "Show All" Not Restricted to Admins](https://agentprime.io/advisories/CVE-2026-25220.md)
  `CVE-2026-25220` · CVE record: openemr openemr · CVSS 5.7 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control
- [OpenEMR's Document and Insurance REST Endpoints Skip ACL](https://agentprime.io/advisories/CVE-2026-25164.md)
  `CVE-2026-25164` · CVE record: openemr openemr · CVSS 8.1 High · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control
- [OpenEMR has SQL Injection in Patient API Sort Parameter](https://agentprime.io/advisories/CVE-2026-24908.md)
  `CVE-2026-24908` · CVE record: openemr openemr · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Feb 2026 · Tags: SQL injection
- [OpenEMR Portal Users Can Forge Provider Signatures](https://agentprime.io/advisories/CVE-2026-24890.md)
  `CVE-2026-24890` · CVE record: openemr openemr · CVSS 8.1 High · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control
- [OpenEMR has FHIR Patient Compartment Bypass in CareTeam Resource](https://agentprime.io/advisories/CVE-2026-24487.md)
  `CVE-2026-24487` · CVE record: openemr openemr · CVSS 5.7 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Information disclosure, Broken access control
- [OpenEMR has SQL Injection in Immunization Search/Report](https://agentprime.io/advisories/CVE-2026-23627.md)
  `CVE-2026-23627` · CVE record: openemr openemr · CVSS 7.4 High · Not analysed yet · Published 25 Feb 2026 · Tags: SQL injection
- [OpenEMR's location resource for Group.$export operation returns entire patient/user population contact information](https://agentprime.io/advisories/CVE-2026-25135.md)
  `CVE-2026-25135` · CVE record: openemr openemr · CVSS 4.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Information disclosure
- [OpenEMR has Broken Access Control in Procedures Configuration](https://agentprime.io/advisories/CVE-2026-25131.md)
  `CVE-2026-25131` · CVE record: openemr openemr · CVSS 8.8 High · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control
- [OpenEMR has Broken Access Control on Care Coordination Module](https://agentprime.io/advisories/CVE-2026-25127.md)
  `CVE-2026-25127` · CVE record: openemr openemr · CVSS 7.0 High · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control
- [OpenEMR has Broken Access Control in Report/Clients/Message List CSV Export](https://agentprime.io/advisories/CVE-2026-25124.md)
  `CVE-2026-25124` · CVE record: openemr openemr · CVSS 6.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control
- [OpenEMR has Broken Access Control that allows unauthorized access to EDI Logs](https://agentprime.io/advisories/CVE-2026-24896.md)
  `CVE-2026-24896` · CVE record: openemr openemr · CVSS 6.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control
- [OpenEMR Arbitrary File Read Vulnerability](https://agentprime.io/advisories/CVE-2026-24849.md)
  `CVE-2026-24849` · CVE record: openemr openemr · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Feb 2026 · Tags: Path traversal
- [OpenEMR has Open Redirect in Eye Exam Form](https://agentprime.io/advisories/CVE-2026-24847.md)
  `CVE-2026-24847` · CVE record: openemr openemr · CVSS 6.1 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Open redirect
- [OpenEMR allows inconsistent escaping of translation function output](https://agentprime.io/advisories/CVE-2026-21443.md)
  `CVE-2026-21443` · CVE record: openemr openemr · CVSS 1.2 Low · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-116
- [OpenEMR has a Stored XSS in GAD-7 Form that Enables Session Hijacking and Privilege Escalation](https://agentprime.io/advisories/CVE-2025-69231.md)
  `CVE-2025-69231` · CVE record: openemr openemr · CVSS 8.7 High · Not analysed yet · Published 25 Feb 2026 · Tags: Cross-site scripting (XSS)
- [OpenEMR allows links sent via Secure Messaging to be opened in OpenEMR and Portal](https://agentprime.io/advisories/CVE-2025-68277.md)
  `CVE-2025-68277` · CVE record: openemr openemr · CVSS 7.2 High · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-451
- [OpenEMR Has Disabled SSL Certificate Verification in HTTP Client](https://agentprime.io/advisories/CVE-2025-67752.md)
  `CVE-2025-67752` · CVE record: openemr openemr · CVSS 8.1 High · Not analysed yet · Published 25 Feb 2026 · Tags: Weak cryptography or TLS
- [OpenEMR has Stored XSS in ub04 helper](https://agentprime.io/advisories/CVE-2025-67491.md)
  `CVE-2025-67491` · CVE record: openemr openemr · CVSS 8.5 High · Not analysed yet · Published 25 Feb 2026 · Tags: Cross-site scripting (XSS)
- [OpenEMR Vulnerable to Broken Access Control in Profile Edit Endpoint](https://agentprime.io/advisories/CVE-2025-67645.md)
  `CVE-2025-67645` · CVE record: openemr openemr · CVSS 8.8 High · Not analysed yet · Published 27 Jan 2026 · Tags: Broken access control
- [OpenEMR may expose Contents of Clinical Notes and Care Planto users who do not have Sensitivities=high privilege](https://agentprime.io/advisories/CVE-2025-54373.md)
  `CVE-2025-54373` · CVE record: openemr openemr · CVSS 7.1 High · Not analysed yet · Published 27 Jan 2026 · Tags: Information disclosure
- [OpenEMR 5.0.2.1 - Remote Code Execution](https://agentprime.io/advisories/CVE-2021-47817.md)
  `CVE-2021-47817` · CVE record: OpenEMR Foundation, Inc. OpenEMR · CVSS 4.8 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: Cross-site scripting (XSS)
- [OpenEMR ≤ 4.1.1 SQL Injection Privilege Escalation and RCE](https://agentprime.io/advisories/CVE-2013-10044.md)
  `CVE-2013-10044` · CVE record: OpenEMR Foundation OpenEMR · CVSS 8.7 High · Not analysed yet · Published 1 Aug 2025 · Tags: SQL injection, Unrestricted file upload
- [OpemEMR Vulnerable to Stored XSS Attack in the Additional Address Section of Patient Demographics](https://agentprime.io/advisories/CVE-2025-43860.md)
  `CVE-2025-43860` · CVE record: openemr openemr · CVSS 7.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 23 May 2025 · Tags: Cross-site scripting (XSS)
- [OpenEMR doesn't log password administration properly](https://agentprime.io/advisories/CVE-2025-32967.md)
  `CVE-2025-32967` · CVE record: openemr openemr · CVSS 5.4 Medium · Not analysed yet · Published 23 May 2025 · Tags: CWE-778
- [OpenEMR Stored XSS via Patient Name Field in Procedure Orders](https://agentprime.io/advisories/CVE-2025-32794.md)
  `CVE-2025-32794` · CVE record: openemr openemr · CVSS 7.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 23 May 2025 · Tags: Cross-site scripting (XSS)
- [OpenEMR allows XSS in Patient Image feature](https://agentprime.io/advisories/CVE-2025-31121.md)
  `CVE-2025-31121` · CVE record: openemr openemr · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.17 · Not analysed yet · Published 1 Apr 2025 · Tags: Cross-site scripting (XSS)
- [OpenEMR Out-of-Band Server-Side Request Forgery (OOB SSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-31117.md)
  `CVE-2025-31117` · CVE record: openemr openemr · CVSS 6.9 Medium · Not analysed yet · Published 31 Mar 2025 · Tags: Server-side request forgery (SSRF)
- [OpenEMR Stored XSS in OpenEMR Bronchitis Form](https://agentprime.io/advisories/CVE-2025-30161.md)
  `CVE-2025-30161` · CVE record: openemr openemr · CVSS 8.4 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 31 Mar 2025 · Tags: Cross-site scripting (XSS)
- [OpenEMR Reflected XSS in AJAX Script](https://agentprime.io/advisories/CVE-2025-30149.md)
  `CVE-2025-30149` · CVE record: openemr openemr · CVSS 6.4 Medium · Not analysed yet · Published 31 Mar 2025 · Tags: Cross-site scripting (XSS)
- [OpenEMR allows Reflected XSS in CAMOS new.php](https://agentprime.io/advisories/CVE-2025-29772.md)
  `CVE-2025-29772` · CVE record: openemr openemr · CVSS 7.2 High · Not analysed yet · Published 31 Mar 2025 · Tags: Cross-site scripting (XSS)
- [OpenEMR Has Directory Traversal in Load Code feature](https://agentprime.io/advisories/CVE-2025-29789.md)
  `CVE-2025-29789` · CVE record: openemr openemr · CVSS 4.6 Medium · Not analysed yet · Published 25 Mar 2025 · Tags: Path traversal
- [SQL injection in OpenEMR and others](https://agentprime.io/advisories/CVE-2020-13567.md)
  `CVE-2020-13567` · CVE record: OpenEMR OpenEMR and 1 more · CVSS 8.8 High · Not analysed yet · Published 18 Apr 2022 · Tags: SQL injection
- [openemr: In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it…](https://agentprime.io/advisories/CVE-2021-25923.md)
  `CVE-2021-25923` · CVE record: openemr · No CVSS score · Not analysed yet · Published 24 Jun 2021
- [openemr: In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting…](https://agentprime.io/advisories/CVE-2021-25922.md)
  `CVE-2021-25922` · CVE record: openemr · No CVSS score · Not analysed yet · Published 22 Mar 2021
- [Cross-site scripting in openemr](https://agentprime.io/advisories/CVE-2021-25917.md)
  `CVE-2021-25917` · CVE record: openemr · CVSS 4.8 Medium · Not analysed yet · Published 22 Mar 2021 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in openemr](https://agentprime.io/advisories/CVE-2021-25918.md)
  `CVE-2021-25918` · CVE record: openemr · CVSS 4.8 Medium · Not analysed yet · Published 22 Mar 2021 · Tags: Cross-site scripting (XSS)
- [openemr: In OpenEMR, versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when…](https://agentprime.io/advisories/CVE-2021-25920.md)
  `CVE-2021-25920` · CVE record: openemr · CVSS 6.5 Medium · Not analysed yet · Published 22 Mar 2021 · Tags: CWE-178
- [Cross-site scripting in openemr](https://agentprime.io/advisories/CVE-2021-25921.md)
  `CVE-2021-25921` · CVE record: openemr · CVSS 5.4 Medium · EPSS 0.89 · Not analysed yet · Published 22 Mar 2021 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in openemr](https://agentprime.io/advisories/CVE-2021-25919.md)
  `CVE-2021-25919` · CVE record: openemr · CVSS 4.8 Medium · EPSS 0.66 · Not analysed yet · Published 22 Mar 2021 · Tags: Cross-site scripting (XSS)

Newest: <https://agentprime.io/advisories/technology/openemr.md>
Older: <https://agentprime.io/advisories/technology/openemr.md?cursor=WyIyMDIxLTAzLTIyVDE5OjIyOjQ5LjAwMDAwMFoiLCJDVkUtMjAyMS0yNTkxOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=openemr&cursor=WyIyMDI2LTAzLTE5VDE5OjI1OjU2LjQ3NDAwMFoiLCJDVkUtMjAyNi0yNTc0NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/openemr/?cursor=WyIyMDI2LTAzLTE5VDE5OjI1OjU2LjQ3NDAwMFoiLCJDVkUtMjAyNi0yNTc0NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.