HL7 records
4 published records for vendor hl7.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2023-24057No exploit | HL7 (Health Level 7) FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal fhl7 · fhir ig publisher · CWE-22 | High8.1 | — | 1.1% | Jan 26, 2023 |
18Monitor | CVE-2014-5452No exploit | CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allowhl7 · c-cda · CWE-79 | Medium4.3 | — | 2.0% | Sep 2, 2014 |
17Monitor | CVE-2014-3861No exploit | Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbitrary web script or Hhl7 · c-cda · CWE-79 | Medium4.3 | — | 1.4% | Sep 2, 2014 |
17Monitor | CVE-2014-3862No exploit | CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted reference element that trihl7 · c-cda · CWE-200 | Medium4.3 | — | 1.3% | Sep 2, 2014 |
- CVE-2023-2405732Monitor
HL7 (Health Level 7) FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal f
HighCVSS 8.1No exploitEPSS 1%hl7 · fhir ig publisherJan 26, 2023
- CVE-2014-545218Monitor
CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allow
MediumCVSS 4.3No exploitEPSS 2%hl7 · c-cdaSep 2, 2014
- CVE-2014-386117Monitor
Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbitrary web script or H
MediumCVSS 4.3No exploitEPSS 1%hl7 · c-cdaSep 2, 2014
- CVE-2014-386217Monitor
CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted reference element that tri
MediumCVSS 4.3No exploitEPSS 1%hl7 · c-cdaSep 2, 2014