CVE-2019-17179

MEDIUM

OpenEMR < 5.0.2 - Stored Cross-Site Scripting

Title source: llm
STIX 2.1

Description

4.1.0, 4.1.1, 4.1.2, 4.1.2.3, 4.1.2.6, 4.1.2.7, 4.2.0, 4.2.1, 4.2.2, 5.0.0, 5.0.0.5, 5.0.0.6, 5.0.1, 5.0.1.1, 5.0.1.2, 5.0.1.3, 5.0.1.4, 5.0.1.5, 5.0.1.6, 5.0.1.7, 5.0.2, fixed in version 5.0.2.1

References (2)

Core 2

Scores

CVSS v3 6.1
EPSS 0.0092
EPSS Percentile 55.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
open-emr/openemr < 5.0.2
Published Oct 04, 2019
Tracked Since Feb 18, 2026