openclinica vulnerabilities
CVEs whose affected-version data names the openclinica package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-12922Medium· 6.3A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13
A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13. This affects an unknown part of the file /ImportCRFData?action=confirm of the component CRF Data Import. Performing manipulation of the argument xml_file resul…
▾ Sunlitopenclinica · openclinicaEPSS 0.54%via NVD
CVE-2025-12921Medium· 4.3A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13
A vulnerability has been found in OpenClinica Community Edition up to 3.12.2/3.13. Affected by this issue is some unknown functionality of the file /ImportCRFData?action=confirm of the component CRF Data Import. Such manipulation of the …
▾ Sunlitopenclinica · openclinicaEPSS 0.53%via NVD