Openclinica

CVE-2025-12922 Nov 10, 01:15 LOW Monitor

A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2025-12921 Nov 10, 00:15 LOW POC Monitor

A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2022-24831 May 14, 01:15 CRITICAL PATCH Act Now

OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This SQL Injection vulnerability could allow attackers to execute arbitrary SQL commands against the database.

CVE-2022-24830 May 14, 00:15 CRITICAL POC PATCH Act Now

OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.