Skip to content

Known vulnerabilities in n/a OpenMRS

Is your version affected?

CVE Summary Score Published
CVE-2020-5731 In OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting Not rated Apr 17, 2020
CVE-2020-5730 In OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross-site scripting Not rated Apr 17, 2020
CVE-2020-5729 In OpenMRS 2.9 and prior, the UI Framework Error Page reflects arbitrary, user-supplied input back to the browser, which… Not rated Apr 17, 2020
CVE-2020-5728 OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages… Not rated Apr 17, 2020
CVE-2020-5733 In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login… Not rated Apr 17, 2020
CVE-2020-5732 In OpenMRS 2.9 and prior, he import functionality of the Data Exchange Module does not properly redirect to a login page… Not rated Apr 17, 2020

Other n/a products