Eclinicalworks Patient Portal — known CVE vulnerabilities

Every CVE whose affected-product data names Eclinicalworks Patient Portal, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2017-5569 — CVSS 9.8 (critical): An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the template.jsp, which can be…
• CVE-2017-5570 — CVSS 8.8 (high): An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the messageJson.jsp, which can…
• CVE-2017-5598 — CVSS 7.5 (high): An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which…
• CVE-2017-5599 — CVSS 6.1 (medium): An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a reflected Cross Site Scripting vulnerability which affects…