Not rated
CVE-2019-3968 In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the…
Description
In OpenEMR 5.0.1 and earlier, an authenticated attacker can execute arbitrary commands on the host system via the Scanned Forms interface when creating a new form.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenEMR | Versions not published |
References
- www.tenable.com www.tenable.com
Timeline
- Published
- Last modified
Other CVEs of OpenEMR
The 14 CVEs of OpenEMR →
CVE-2021-25923
In OpenEMR, versions 5.0.0 to 6.0.0.1 are vulnerable to weak password requirements as it does not enforce a maximum…
Not rated
CVE-2021-25922
In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being…
Not rated
CVE-2021-25917
In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being…
4.8
Medium
CVE-2021-25918
In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being…
4.8
Medium