Skip to content

Product

openmrs org.openmrs.module:legacyui-api vulnerabilities

1 published CVE affecting openmrs org.openmrs.module:legacyui-api, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest openmrs org.openmrs.module:legacyui-api CVEs

Newest publication first

  1. CVE-2026-44715 OpenMRS has Broken Access Control in HL7 Configuration

    Published
    HighCVSS 8.7 EPSS 0.41%

    OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the startHl7ArchiveMigration method is accessible, which should be restricted to admin-level acco...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.