Vulnerabilities (CVE)

Filtered by vendor Openmrs Subscribe
Filtered by product Reference Application
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-43094 1 Openmrs 2 Openmrs, Reference Application 2022-05-17 7.5 HIGH 9.8 CRITICAL
An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0 via GET requests on arbitrary parameters in patient.page.
CVE-2018-16521 1 Openmrs 2 Html Form Entry, Reference Application 2018-12-07 7.5 HIGH 9.8 CRITICAL
An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0.