CVE-2015-4591 eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to inject arbitrary javascript via the strMessage param...
MediumCVSS 6.1
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to inject arbitrary javascript via the strMessage parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eclinicalworks population health | All versions | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20160131 eClinicalWorks (CCMR) - Multiple Vulnerabilities exploit mailing-list third-party-advisory vdb-entry
- 39402 exploit third-party-advisory vdb-entry