OpenClinica
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Community Edition | 2 | – | Nov 10, 2025 |
| OpenClinica | 2 | – | May 14, 2022 |
Exploited and recent CVEs
- CVE-2025-12922 OpenClinica Community Edition CRF Data Import ImportCRFData path traversal 0.6%
- CVE-2025-12921 OpenClinica Community Edition CRF Data Import ImportCRFData xml injection 0.6%
- CVE-2022-24831 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in OpenClinica 1.1%
- CVE-2022-24830 Path Traversal in OpenClinica 3.2%