What's probably WAY worse than this is that most healthcare providers running OpenEMR are likely on older versions of OpenEMR where CVEs are already detected.
Nobody uses OpenEMR. No chance. They are lying about their numbers.
I can't speak to OpenEMR, but OpenMRS is popular overseas, and has done a lot of work in Africa.
OpenEMR may be in similar spaces.
Well, it's not popular maybe on bigger hospitals, but back in the day I think it was relatively popular on smaller practices even on the US. I don't know if it has lost traction (or not) with the popularization of cloud services, I'm not super up to date...