Known Vulnerabilities for Clinical by Oracle
Listed below are 4 of the newest known vulnerabilities associated with "Clinical" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-124488 json | OpenEMR before 8.3.0 contains an authorization bypass vulnerability that allows authenticated clinicians lacking high-sensiti... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-124487 json | OpenEMR before 8.4.0 contains an improper authorization vulnerability in the non-patient POST /fhir/DocumentReference/$docref... | Not Provided | 2026-11-08 | 2026-11-09 |
| CVE-2026-124482 json | OpenEMR before 8.4.0 contains an authorization bypass allowing low-privileged SMART standalone-launch users to bind arbitrary... | Not Provided | 2026-11-08 | 2026-11-10 |
| CVE-2026-124473 json | OpenEMR before 8.3.0 contains a broken object-level authorization vulnerability in the SOAP note update API, which does not v... | Not Provided | 2026-11-08 | 2026-11-10 |
| CVE-2026-124470 json | OpenEMR before 8.3.0 contains a broken object level authorization vulnerability in portal/report/portal_custom_report.php tha... | Not Provided | 2026-11-08 | 2026-11-09 |
| CVE-2026-124464 json | OpenEMR before 8.4.0 contains an authorization bypass vulnerability that allows patient-scoped SMART tokens to read other pat... | Not Provided | 2026-11-08 | 2026-11-10 |
| CVE-2026-124459 json | OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in many encounter-form view and save endpoint... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-118467 json | Shared telemetry and logging components store or transmit patient and doctor identifiers, clinical information, and low-entro... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-118464 json | Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to... | Not Provided | 2026-11-09 | 2026-11-09 |
| CVE-2026-104138 json | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, cust... | Not Provided | 2026-11-05 | 2026-11-09 |