OpenClinica

Products

ProductCVEsExploitedLatest
Community Edition2–Nov 10, 2025
OpenClinica2–May 14, 2022

Exploited and recent CVEs

  • CVE-2025-12922 Medium 6.3 OpenClinica Community Edition CRF Data Import ImportCRFData path traversal 0.6%
  • CVE-2025-12921 Medium 4.3 OpenClinica Community Edition CRF Data Import ImportCRFData xml injection 0.6%
  • CVE-2022-24831 High 8.3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in OpenClinica 1.1%
  • CVE-2022-24830 Medium 6.5 Path Traversal in OpenClinica 3.2%