Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a vulnerability where sensitive data is unintentionally revealed to unauthorized parties. Contents of Clinical Notes and Care Plan, where an encounter has Sensitivity=high, can be viewed and changed by users who do not have Sensitivities=high privilege. Version 7.0.4 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-01-27 | 1 | General1 |
| 2026-01-28 | 1 | Disclosure1 |
CVE-2025-54373 OpenEMR Sensitive Data Exposure Vulnerability in Versions Prior to 7.0.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-54373
Post summary
The text announces CVE‑2025‑54373 as a sensitive data exposure flaw affecting OpenEMR versions prior to 7.0.4, with no PoC, exploit, active attack evidence, or remediation details provided.
CVE-2025-54373 OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a vulnerability where sensitive … https://www.cve.org/CVERecord?id=CVE-2025-54373
Post summary
The message indicates that CVE‑2025‑54373 affects OpenEMR versions prior to 7.0.4, but does not provide Proof of Concept, exploit code, patch information, or detailed technical vulnerability data.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | open-emr | openemr | 7.0.3.4 | - | - |