dhis2
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 14 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 24, 2021 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE)
DHIS2 SQL injection in SQL View filter values
DHIS2 Reflected XSS in OpenAPI HTML scope parameter
SQL Injection in SqlView Filter Parameter Leading to Arbitrary Database Read
DHIS2 Core Improper Access Control with Category Option Combination sharing in /api/trackedEntityInstance and /api/events
DHIS2 Core unrestricted session cookies with Personal Access Tokens
DHIS2 Core vulnerable to Improper Access Control with PATCH requests
Cross-site Scripting with user-uploaded files in dhis2-core
Privilege Chaining with the user admin role in dhis2-core
Semi-blind Server-Side Request Forgery in dhis2-core
Monitor dhis2 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.