Fhir
1 CVEs across 2 Fhir products. Browse Fhir vulnerabilities, severities, and proof-of-concept exploits.
Fhir products with known CVEs
Fhir CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-55887 | High | 8.6 | 2024-12-13 | Ucum-java is a FHIR Java library providing UCUM Services. In versions prior to 1.0.9, XML parsing performed by the UcumEssenceService is vulnerable to XML exte… |
CVE-2021-32053 | Medium | 5.3 | 2021-05-10 | JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access to the database after the attack stops) via history requests. This occ… |
CVE-2019-12741 | Medium | 6.1 | 2019-06-05 | XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0. The attack involves unsanitized HTTP parameters being output in a fo… |