CVE-2015-4592: Eclinicalworks Population Health

High severity, CVSS 8.8. EPSS: 3.3% chance of exploitation in the next 30 days.

eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allows remote authenticated users to inject arbitrary malicious database commands as part of user input.

Affected products

Published 2017-01-10. Last modified 2026-06-17.