https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-40279.htmlhttps://patchthecve.com/cve/CVE-2023-40279.htmlWed, 17 Jun 2026 06:17:00 +0000HIGH 7.5: An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to main.do.https://patchthecve.com/cve/CVE-2023-40278.htmlhttps://patchthecve.com/cve/CVE-2023-40278.htmlWed, 17 Jun 2026 06:17:00 +0000HIGH 7.5: An issue was discovered in OpenClinic GA 5.247.01. An Information Disclosure vulnerability has been identified in the printAppointmentPdf.jsp component of OpenClinic GA. By changing the AppointmentUid parameter, an attacker can determine whether a specific appointment exists based on the error messahttps://patchthecve.com/cve/CVE-2023-40280.htmlhttps://patchthecve.com/cve/CVE-2023-40280.htmlWed, 17 Jun 2026 06:17:01 +0000HIGH 7.5: An issue was discovered in OpenClinic GA 5.247.01. An attacker can perform a directory path traversal via the Page parameter in a GET request to popup.jsp.https://patchthecve.com/cve/CVE-2023-40277.htmlhttps://patchthecve.com/cve/CVE-2023-40277.htmlWed, 17 Jun 2026 06:16:59 +0000MEDIUM 6.1: An issue was discovered in OpenClinic GA 5.247.01. A Reflected Cross-Site Scripting (XSS) vulnerability has been discovered in the login.jsp message parameter.https://patchthecve.com/cve/CVE-2023-40276.htmlhttps://patchthecve.com/cve/CVE-2023-40276.htmlWed, 17 Jun 2026 06:16:59 +0000CRITICAL 9.1: An issue was discovered in OpenClinic GA 5.247.01. An Unauthenticated File Download vulnerability has been discovered in pharmacy/exportFile.jsp.https://patchthecve.com/cve/CVE-2023-40275.htmlhttps://patchthecve.com/cve/CVE-2023-40275.htmlWed, 17 Jun 2026 06:16:59 +0000CRITICAL 9.1: An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to _common/search/searchByAjax/patientslistShow.jsp.