Known vulnerabilities in LibreHealth EHR

Known vulnerabilities in LibreHealth EHR

Vendor: LibreHealth

Software: LibreHealth EHR

Software CPE: cpe:2.3:a:librehealth:librehealth_ehr:*:*:*:*:*:*:*:*

Website: https://librehealth.io/

Total vulnerabilities: 10

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU64097 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31497	CWE-79	Low	No	No	-	08.06.2022	SB2022050909
#VU64096 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31492	CWE-79	Low	No	No	-	08.06.2022	SB2022050909
#VU64095 - Improper Access Control CVE-2022-31496	CWE-284	Medium	No	No	-	08.06.2022	SB2022050909
#VU64093 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31498	CWE-79	Low	No	No	-	08.06.2022	SB2022050909
#VU64090 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31494	CWE-79	Low	No	No	-	08.06.2022	SB2022050909
#VU64084 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31495	CWE-79	Low	No	No	-	08.06.2022	SB2022050909
#VU64014 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-31493	CWE-79	Low	No	No	-	07.06.2022	SB2022050909
#VU62874 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-29938	CWE-89	High	No	No	-	09.05.2022	SB2022050909
#VU62873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-29939	CWE-79	Low	No	No	-	09.05.2022	SB2022050909
#VU62870 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-29940	CWE-79	Low	No	No	-	09.05.2022	SB2022050909