FHIR records
3 published records for vendor fhir.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-400 Uncontrolled Resource Consumption1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2024-51132Proof of concept | An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary CWE-611 | Critical9.8 | — | 1.9% | Nov 5, 2024 |
24Monitor | CVE-2019-12741No exploit | XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0.fhir · hapi fhir · CWE-79 | Medium6.1 | — | 1.2% | Jun 5, 2019 |
21Monitor | CVE-2021-32053No exploit | JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access to the database after the attack stops) via historyfhir · hapi fhir · CWE-400 | Medium5.3 | — | 1.5% | May 10, 2021 |
- CVE-2024-5113240Plan
An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary
CriticalCVSS 9.8Proof of conceptEPSS 1%Nov 5, 2024
- CVE-2019-1274124Monitor
XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0.
MediumCVSS 6.1No exploitEPSS 1%fhir · hapi fhirJun 5, 2019
- CVE-2021-3205321Monitor
JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access to the database after the attack stops) via history
MediumCVSS 5.3No exploitEPSS 1%fhir · hapi fhirMay 10, 2021