eClinicalWorks Population Health (CCMR) vulnerabilities
3 known CVE vulnerabilities in eClinicalWorks Population Health (CCMR), translated and rated.
- CVE-2015-4593High
eClinicalWorks Population Health (CCMR) has a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp that allows remote attackers to hijack the authentication of content administrators. This could lead to the creation, modification, and deletion of users, appointments, and employees.
- CVE-2015-4592High
eClinicalWorks Population Health (CCMR) has an SQL injection vulnerability in portalUserService.jsp, allowing remote authenticated users to inject arbitrary malicious database commands as part of user input.
- CVE-2015-4594Critical
eClinicalWorks Population Health (CCMR) has a session fixation vulnerability. The application does not assign a new session ID during user authentication, allowing the use of an existing session ID.