CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-19276

OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerability that allows an unauthenticated user to execute arbitrary commands on the targeted system via crafted XML data in a request body.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.919

EPSS Ranking 99.7%

CVSS Severity

CVSS v3 Score 10.0

CVSS v2 Score 10.0

References

Products affected by CVE-2018-19276

Openmrs » Openmrs » Version: 1.12.0

cpe:2.3:a:openmrs:openmrs:1.12.0
Openmrs » Openmrs » Version: 2.0.0

cpe:2.3:a:openmrs:openmrs:2.0.0
Openmrs » Openmrs » Version: 2.0.1

cpe:2.3:a:openmrs:openmrs:2.0.1
Openmrs » Openmrs » Version: 2.0.2

cpe:2.3:a:openmrs:openmrs:2.0.2
Openmrs » Openmrs » Version: 2.0.3

cpe:2.3:a:openmrs:openmrs:2.0.3
Openmrs » Openmrs » Version: 2.0.4

cpe:2.3:a:openmrs:openmrs:2.0.4
Openmrs » Openmrs » Version: 2.0.4.1

cpe:2.3:a:openmrs:openmrs:2.0.4.1
Openmrs » Openmrs » Version: 2.0.5

cpe:2.3:a:openmrs:openmrs:2.0.5
Openmrs » Openmrs » Version: 2.0.6

cpe:2.3:a:openmrs:openmrs:2.0.6
Openmrs » Openmrs » Version: 2.0.7

cpe:2.3:a:openmrs:openmrs:2.0.7
Openmrs » Openmrs » Version: 2.1.0

cpe:2.3:a:openmrs:openmrs:2.1.0
Openmrs » Openmrs » Version: 2.1.1

cpe:2.3:a:openmrs:openmrs:2.1.1
Openmrs » Openmrs » Version: 2.1.2

cpe:2.3:a:openmrs:openmrs:2.1.2
Openmrs » Openmrs » Version: 2.1.3

cpe:2.3:a:openmrs:openmrs:2.1.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-19276

Products

Pricing

Contact Us