PatchTheCVEeclinicalworks vulnerabilities
Recent CVEs affecting eclinicalworks products. 8 tracked.
eclinicalworks has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-01-27. Highest priority: CVE-2015-4594 (score 68/100).
- CVE-2017-5599 MEDIUM 6.1 DOWNGRADE An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13
- CVE-2017-5598 HIGH 7.5 DOWNGRADE An issue was discovered in eClinicalWorks healow@work 8.0 build 8
- CVE-2017-5570 HIGH 8.8 DOWNGRADE An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13
- CVE-2017-5569 CRITICAL 9.8 DOWNGRADE An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13
- CVE-2015-4594 CRITICAL 9.8 MITIGATE eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability
- CVE-2015-4593 HIGH 8.8 MITIGATE eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in port
- CVE-2015-4592 HIGH 8.8 MITIGATE eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp w
- CVE-2015-4591 MEDIUM 6.1 MITIGATE eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which a
FAQ
How do I fix eclinicalworks vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eclinicalworks being exploited right now?
None of the tracked eclinicalworks CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eclinicalworks CVE should I patch first?
CVE-2015-4594 currently ranks highest (68/100): eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability.