Sploitus

14 exploited vulnerabilities in Openmrs

Vulnerabilities with publicly known exploits

Vendors
Openmrs
With known exploits
14
Affected Openmrs versions
< 1.12.1, 2.0.8, 2.1.4, 2.4.3, 2.1, 2.9.0

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2018-19276 9 exploits
CVSS 10.0 CRITICAL 2019-03-17FIX AVAILABLE
OpenMRS - Java Deserialization RCE (Metasploit)OpenMRS - Java Deserialization Remote Code Execution Exploit
CVE-2025-25928
CVSS 8.0 HIGH 2025-03-11
CVE-2025-25927
CVSS 6.8 MEDIUM 2025-03-11FIX AVAILABLE
CVE-2014-8073 1 exploit
CVSS 6.8 MEDIUM 2014-10-23FIX AVAILABLE
OpenMRS 2.1 Access Bypass / XSS / CSRF
CVE-2020-5733
CVSS 6.1 MEDIUM 2020-04-17FIX AVAILABLE
CVE-2020-5732
CVSS 6.1 MEDIUM 2020-04-17FIX AVAILABLE
CVE-2020-5731
CVSS 6.1 MEDIUM 2020-04-17FIX AVAILABLE
CVE-2020-5730
CVSS 6.1 MEDIUM 2020-04-17FIX AVAILABLE
CVE-2020-5729
CVSS 6.1 MEDIUM 2020-04-17FIX AVAILABLE
CVE-2020-5728
CVSS 6.1 MEDIUM 2020-04-17FIX AVAILABLE
CVE-2025-25929
CVSS 5.4 MEDIUM 2025-03-11
CVE-2025-25925
CVSS 4.8 MEDIUM 2025-03-11
CVE-2014-8071 1 exploit
CVSS 4.3 MEDIUM 2014-10-23
OpenMRS 2.1 Access Bypass / XSS / CSRF
CVE-2014-8072 1 exploit
CVSS 4.0 MEDIUM 2014-10-23FIX AVAILABLE
OpenMRS 2.1 Access Bypass / XSS / CSRF