What’s Vulnerable › Vulnerabilities

CVE-2020-14487: OpenClinic GA

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-07-29 · updated 2026-06-17
• Weakness: CWE-912

Description

OpenClinic GA 5.09.02 contains a hidden default user account that may be accessed if an administrator has not expressly turned off this account, which may allow an attacker to login and execute arbitrary commands.

Affected products

• Freemedsoftware Openclinic Ga: 5.09.02

References

• https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01
• https://us-cert.cisa.gov/ics/advisories/ICSMA-20-184-01

Get alerted when CVE-2020-14487 or the next vulnerability affects your stack