Openclinic GA Project vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2023-40280 An issue was discovered in OpenClinic GA 5.247.01.High 7.5 · Mar 18, 2024
• CVE-2023-40276 An issue was discovered in OpenClinic GA 5.247.01.Critical 9.1 · Mar 18, 2024
• CVE-2023-40275 An issue was discovered in OpenClinic GA 5.247.01.Critical 9.1 · Mar 18, 2024
• CVE-2021-37364 OpenClinic GA 5.194.18 is affected by Insecure Permissions.High 7.8 · Oct 26, 2021
• CVE-2020-27246 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application.High 8.8 · May 11, 2021
• CVE-2020-27245 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application.High 8.8 · May 11, 2021
• CVE-2020-27244 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application.High 8.8 · May 11, 2021
• CVE-2020-27243 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application.High 8.8 · May 11, 2021
• CVE-2020-27242 An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application.High 8.8 · May 11, 2021
• CVE-2020-27232 An exploitable SQL injection vulnerability exists in ‘manageServiceStocks.jsp’ page of OpenClinic GA 5.173.3.High 8.8 · May 10, 2021
• CVE-2020-27231 A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application.High 8.8 · May 10, 2021
• CVE-2020-27230 A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application.High 8.8 · May 10, 2021
• CVE-2020-27229 A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application.High 8.8 · May 10, 2021
• CVE-2020-27226 An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3.High 8.8 · May 10, 2021
• CVE-2020-27241 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3.Critical 9.8 · Apr 19, 2021
• CVE-2020-27240 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3.Critical 9.8 · Apr 19, 2021
• CVE-2020-27239 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3.Critical 9.8 · Apr 15, 2021
• CVE-2020-27238 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3.Critical 9.8 · Apr 15, 2021
• CVE-2020-27237 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3.Critical 9.8 · Apr 15, 2021
• CVE-2020-27236 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the compnomenclature parameter.Critical 9.8 · Apr 13, 2021
• CVE-2020-27235 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the description parameter.Critical 9.8 · Apr 13, 2021
• CVE-2020-27234 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the serviceUID parameter.Critical 9.8 · Apr 13, 2021
• CVE-2020-27233 An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the supplierUID parameter.Critical 9.8 · Apr 13, 2021
• CVE-2020-27228 An incorrect default permissions vulnerability exists in the installation functionality of OpenClinic GA 5.173.3.High 7.8 · Apr 13, 2021
• CVE-2020-27227 An exploitable unatuhenticated command injection exists in the OpenClinic GA 5.173.3.Critical 9.8 · Apr 13, 2021