Dhis2
Dhis2 Dhis 2: vulnerabilidades y CVE
Dhis2 Dhis 2 tiene 10 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-32060 | Media (6.5) | 0.52% | — | 9 may 2023 | DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.35 branch and prior to versions 2.36.13, 2.37.8, 2.38.2, and 2.39.0, when the Category Option… |
| CVE-2023-31139 | Alta (7.5) | 0.63% | — | 9 may 2023 | DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.37 branch and prior to versions 2.37.9.1, 2.38.3.1, and 2.39.1.2, Personal Access Tokens (PATs)… |
| CVE-2023-31138 | Media (6.5) | 0.61% | — | 9 may 2023 | DHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.36 branch and prior to versions 2.37.9.1, 2.38.3.1, and 2.39.1.2, using object model traversal in… |
| CVE-2022-41948 | Alta (7.2) | 0.62% | — | 8 dic 2022 | DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Affected versions are subject to a privilege escalation vulnerability. A DHIS2 user with authority to… |
| CVE-2022-41947 | Media (5.4) | 0.37% | — | 8 dic 2022 | DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. Through various features of DHIS2, an authenticated user may be able to upload a file which includes… |
| CVE-2022-41949 | Media (4.3) | 0.42% | — | 8 dic 2022 | DHIS 2 is an open source information system for data capture, management, validation, analytics and visualization. In affected versions an authenticated DHIS2 user can craft a request to DHIS2 to instruct the server to… |
| CVE-2022-24848 | Alta (8.8) | 1.1% | — | 1 jun 2022 | DHIS2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability affects the `/api/programs/orgUnits?programs=` API endpoint in DHIS2 versions… |
| CVE-2021-41187 | Alta (8.8) | 0.85% | — | 1 nov 2021 | DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the… |
| CVE-2021-39179 | Alta (8.8) | 1.9% | — | 29 oct 2021 | DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL Injection vulnerability in the Tracker component in DHIS2 Server allows authenticated remote attackers to… |
| CVE-2021-32704 | Alta (8.8) | 0.77% | — | 24 jun 2021 | DHIS 2 is an information system for data capture, management, validation, analytics and visualization. A SQL injection security vulnerability has been found in specific versions of DHIS2. This vulnerability affects the… |