Vendors / Cerner Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 5
Exploited now Cerner records in CISA KEV No Cerner vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
A SQL Injection vulnerability in Cerner Mobile Care 5.0.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via a Fullwidth Apostrophe (aka U+FF07) in the default.aspx User ID field.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02736 · Published 2021-08-24 · No fix listed CWE-89
Priority MEDIUM 46
An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02203 · Published 2019-04-25 · No fix listed
Priority LOW 39
Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3).
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00657 · Published 2020-04-29 · No fix listed CWE-120
Priority LOW 39
Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3).
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00657 · Published 2020-04-29 · No fix listed CWE-120
Priority LOW 39
Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3).
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00657 · Published 2020-04-29 · No fix listed CWE-120
Priority LOW 39
Cerner medico 26.00 allows variable reuse, possibly causing data corruption.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00702 · Published 2020-04-29 · No fix listed
Priority LOW 34
An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices.
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2019-04-25 · No fix listed CWE-1188
Open these records in search → All records by CVSS severity
2 5 0 0 0
