Vulnerabilities > Eclinicalworks > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-01-27 CVE-2017-5599 Cross-site Scripting vulnerability in Eclinicalworks Patient Portal 7.0
An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13.
network
low complexity
eclinicalworks CWE-79
6.1
6.1
2017-01-10 CVE-2015-4591 Cross-site Scripting vulnerability in Eclinicalworks Population Health
eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows remote unauthenticated users to inject arbitrary javascript via the strMessage parameter.
network
low complexity
eclinicalworks CWE-79
6.1
6.1