Vulnerability Description
eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Eclinicalworks | Population Health | - |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMExploitThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/archive/1/537420/100/0/threadedExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/39402/ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/135533/eClinicalWorks-Population-Health-CCMExploitThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/archive/1/537420/100/0/threadedExploitThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/39402/ExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2015-4592?
CVE-2015-4592 is a vulnerability with a CVSS score of 8.8 (HIGH). eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as ...
How severe is CVE-2015-4592?
CVE-2015-4592 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-4592?
Check the references section above for vendor advisories and patch information. Affected products include: Eclinicalworks Population Health.