CVSS v3
8.8
HIGH
EPSS Score
78.6%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory.
Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary PHP code by uploading a file with a PHP extension via the images upload form and accessing it in the images directory.
Active exploitation of CVE-2018-15139 has not been confirmed. The EPSS score is 78.6%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2018-15139 has a CVSS v3 base score of 8.8 (HIGH severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).