CVE-2022-1177: Open-EMR Openemr

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Accounting User Can Download Patient Reports in openemr in GitHub repository openemr/openemr prior to 6.1.0.

Affected products

• Open-EMR Openemr: before 6.1.0 (fixed in 6.1.0)

Published 2022-03-30. Last modified 2026-06-17.