Openmrs Reference Application — known CVE vulnerabilities

Every CVE whose affected-product data names Openmrs Reference Application, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2018-16521 — CVSS 9.8 (critical): An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Application 2.8.0.
• CVE-2021-43094 — CVSS 9.8 (critical): An SQL Injection vulnerability exists in OpenMRS Reference Application Standalone Edition <=2.11 and Platform Standalone Edition <=2.4.0…
• CVE-2021-4288 — CVSS 3.5 (low): A vulnerability was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. It has been rated as problematic. This issue affects…
• CVE-2021-4289 — CVSS 3.5 (low): A vulnerability classified as problematic was found in OpenMRS openmrs-module-referenceapplication up to 2.11.x. Affected by this…