dhis2 Dhis2 Core Vulnerabilities

Dhis2 Dhis2-core vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

21 July 2026

SQL Injection Vulnerability in DHIS2 Information System
CVE-2026-55082
Dhis2Dhis2-core8.7HIGH
OpenAPI HTML Endpoint Vulnerability in DHIS2 by DHIS2
CVE-2026-55081
Dhis2Dhis2-core7.3HIGH
SQL Injection Vulnerability in DHIS2 Application Affecting Multiple Versions
CVE-2026-55084
Dhis2Dhis2-core8.8HIGH

9 May 2023

DHIS2 Core vulnerable to Improper Access Control with PATCH requests
CVE-2023-31138
Dhis2Dhis2-core7.1HIGH
DHIS2 Core unrestricted session cookies with Personal Access Tokens
CVE-2023-31139
Dhis2Dhis2-core4.3MEDIUM
DHIS2 Core Improper Access Control with Category Option Combination sharing in /api/trackedEntityInstance and /api/events
CVE-2023-32060
Dhis2Dhis2-core6.5MEDIUM

8 December 2022

1 June 2022

SQL Injection in DHIS2's in OrgUnit program association
CVE-2022-24848
Dhis2Dhis2-core8.8HIGH

1 November 2021

SQL Injection in DHIS2 Tracker API
CVE-2021-41187
Dhis2Dhis2-core8.1HIGH

29 October 2021

SQL Injection in DHIS2 Tracker API
CVE-2021-39179
Dhis2Dhis2-core8.8HIGH

24 June 2021

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in dhis2-core
CVE-2021-32704
Dhis2Dhis2-core8.5HIGH