ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score
← Back to results

CVE-2020-36635

A vulnerability was found in OpenMRS Appointment Scheduling Module up to 1.12.x. It has been classified as problematic. This affects the function validateFieldName of the file api/src/main/java/org/openmrs/module/appointmentscheduling/validator/AppointmentTypeValidator.java. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.13.0 is able to address this issue. The name of the patch is 34213c3f6ea22df427573076fb62744694f601d8. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216915.
An official patch is available. Apply the patch as soon as possible.
3.5
CVSS
0.4
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
CVSS v4.0 Metrics
Exploitability
Attack VectorNetwork
ComplexityLow
RequirementsPresent
PrivilegesLow
User InteractionActive
Threat
Exploit MaturityUnreported
Vulnerable System
ConfidentialityNone
IntegrityLow
AvailabilityNone
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Patch StatusOfficial Patch

Change Log
DateSourceChangesScore
2026-07-21cve.orginitial, patch: Official Patch0.4
References: CVE.org · NVD

Affected Software
VendorProductVersion
OpenMRSAppointment Scheduling Module1.0
OpenMRSAppointment Scheduling Module1.1
OpenMRSAppointment Scheduling Module1.10
OpenMRSAppointment Scheduling Module1.11
OpenMRSAppointment Scheduling Module1.12
OpenMRSAppointment Scheduling Module1.2
OpenMRSAppointment Scheduling Module1.3
OpenMRSAppointment Scheduling Module1.4
OpenMRSAppointment Scheduling Module1.5
OpenMRSAppointment Scheduling Module1.6
OpenMRSAppointment Scheduling Module1.7
OpenMRSAppointment Scheduling Module1.8
OpenMRSAppointment Scheduling Module1.9
openmrsappointment_scheduling_module< 1.13.0
Published: 2022-12-27