Iqonic Design Kivicare vulnerabilities
7 vulnerabilities
Known vulnerabilities in Iqonic Design Kivicare, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-66095iqonic designkivicare+1
EPSS score0.24%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows SQL Injection.This issue affects KiviCare: from n/a through <= 3.6.13.CVE-2024-35659iqonic designkivicare+2EPSS score0.34%
Missing Authorization vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KiviCare: from n/a through <= 3.6.6.CVE-2026-40792iqonic designkivicare+1EPSS score0.26%
Subscriber Insecure Direct Object References (IDOR) in KiviCare <= 4.2.1 versions.CVE-2026-42735iqonic designkivicare+1EPSS score0.44%
Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Password Recovery Exploitation.This issue affects KiviCare: from n/a through <= 4.3.0.CVE-2026-25383iqonic designkivicare+1EPSS score0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Reflected XSS.This issue affects KiviCare: from n/a through <= 3.6.16.CVE-2026-25022iqonic designkivicare+1EPSS score0.24%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Blind SQL Injection.This issue affects KiviCare: from n/a through <= 3.6.16.CVE-2026-25034iqonic designkivicare+1EPSS score0.19%
Missing Authorization vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KiviCare: from n/a through <= 3.6.16.