Cdac-noida E-sushrut, Hospital Management Information System (Hmis)
6 CVEs affecting Cdac-noida E-sushrut, Hospital Management Information System (Hmis). Latest disclosed: 2026-04-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-42518 | | 2026-04-29 | This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript. An unauthenticat… | |
CVE-2026-42517 | | 2026-04-29 | This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data. An authenticated attacker could exploit this… | |
CVE-2026-42516 | | 2026-04-29 | This vulnerability exists in e-Sushrut due to improper authorization checks during resource access. An authenticated attacker could exploit this vulnerability… | |
CVE-2026-42515 | | 2026-04-29 | This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability… | |
CVE-2026-42514 | | 2026-04-29 | This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses. A remote attacker could exploit this vulnerability by interce… | |
CVE-2026-42513 | | 2026-04-29 | This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status… |