population health vulnerabilities and fixes

Recent CVEs affecting population health, with upgrade or downgrade steps. 4 tracked.

Also searched as: populationhealth.

population health has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-01-10. Highest priority: CVE-2015-4594 (score 68/100).

• CVE-2015-4594 CRITICAL 9.8 MITIGATE eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability
• CVE-2015-4593 HIGH 8.8 MITIGATE eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in port
• CVE-2015-4592 HIGH 8.8 MITIGATE eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp w
• CVE-2015-4591 MEDIUM 6.1 MITIGATE eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which a

FAQ

How do I fix population health vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is population health being exploited right now?

None of the tracked population health CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which population health CVE should I patch first?

CVE-2015-4594 currently ranks highest (68/100): eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability.

RSS feed for population health · ← Back to latest CVEs