dhis2 Latest Vulnerabilities
Latest vulnerabilities published by dhis2
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
SQL Injection Vulnerability in DHIS2 Information System
CVE-2026-55082Dhis2Dhis2-core8.7HIGHOpenAPI HTML Endpoint Vulnerability in DHIS2 by DHIS2
CVE-2026-55081Dhis2Dhis2-core7.3HIGHSQL Injection Vulnerability in DHIS2 Application Affecting Multiple Versions
CVE-2026-55084Dhis2Dhis2-core8.8HIGHDHIS2 Core vulnerable to Improper Access Control with PATCH requests
CVE-2023-31138Dhis2Dhis2-core7.1HIGHDHIS2 Core unrestricted session cookies with Personal Access Tokens
CVE-2023-31139Dhis2Dhis2-core4.3MEDIUMDHIS2 Core Improper Access Control with Category Option Combination sharing in /api/trackedEntityInstance and /api/events
CVE-2023-32060Dhis2Dhis2-core6.5MEDIUMCross-site Scripting with user-uploaded files in dhis2-core
CVE-2022-41947Dhis2Dhis2-core5.4MEDIUMPrivilege Chaining with the user admin role in dhis2-core
CVE-2022-41948Dhis2Dhis2-core6.7MEDIUMSemi-blind Server-Side Request Forgery in dhis2-core
CVE-2022-41949Dhis2Dhis2-core5MEDIUMSQL Injection in DHIS2's in OrgUnit program association
CVE-2022-24848Dhis2Dhis2-core8.8HIGHSQL Injection in DHIS2 Tracker API
CVE-2021-41187Dhis2Dhis2-core8.1HIGHSQL Injection in DHIS2 Tracker API
CVE-2021-39179Dhis2Dhis2-core8.8HIGHImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in dhis2-core
CVE-2021-32704Dhis2Dhis2-core8.5HIGH