care2x vulnerabilities

Recent CVEs affecting care2x products. 2 tracked.

care2x has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-08-26. Highest priority: CVE-2021-36351 (score 64/100).

• CVE-2021-36352 MEDIUM 5.4 DOWNGRADE Stored cross-site scripting (XSS) vulnerability in Care2x Hospital Information Management 2.7 Alpha
• CVE-2021-36351 CRITICAL 9.8 UPGRADE SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the (1) pday,

FAQ

How do I fix care2x vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is care2x being exploited right now?

None of the tracked care2x CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which care2x CVE should I patch first?

CVE-2021-36351 currently ranks highest (64/100): SQL Injection Vulnerability in Care2x Open Source Hospital Information Management 2.7 Alpha via the (1) pday, .

Products

• hospital information management
• hospital information management system

← Back to latest CVEs