Vulnerabilities > Dhis2
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-05-09 | CVE-2023-31138 | Incorrect Authorization vulnerability in Dhis2 Dhis 2 DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. | 6.5 |
2023-05-09 | CVE-2023-31139 | Insufficient Session Expiration vulnerability in Dhis2 Dhis 2 DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. | 7.5 |
2023-05-09 | CVE-2023-32060 | Incorrect Authorization vulnerability in Dhis2 Dhis 2 DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. | 6.5 |
2022-12-08 | CVE-2022-41947 | Cross-site Scripting vulnerability in Dhis2 Dhis 2 DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. | 5.4 |
2022-12-08 | CVE-2022-41948 | Improper Privilege Management vulnerability in Dhis2 Dhis 2 DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. | 7.2 |
2022-12-08 | CVE-2022-41949 | Server-Side Request Forgery (SSRF) vulnerability in Dhis2 Dhis 2 DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. | 4.3 |
2022-06-01 | CVE-2022-24848 | SQL Injection vulnerability in Dhis2 Dhis 2 DHIS2 is an information system for data capture, management, validation, analytics and visualization. | 8.8 |
2021-11-01 | CVE-2021-41187 | SQL Injection vulnerability in Dhis2 Dhis 2 DHIS 2 is an information system for data capture, management, validation, analytics and visualization. | 8.8 |
2021-10-29 | CVE-2021-39179 | SQL Injection vulnerability in Dhis2 Dhis 2 DHIS 2 is an information system for data capture, management, validation, analytics and visualization. | 8.8 |
2021-06-24 | CVE-2021-32704 | SQL Injection vulnerability in Dhis2 Dhis 2 DHIS 2 is an information system for data capture, management, validation, analytics and visualization. | 8.8 |