Epic

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Epic records in CISA KEV

No Epic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Epic4 2 records MEDIUM Mychart 1 record MEDIUM

Records

3 records

TI-2016-05374 CVE-2016-6272 · GHSA-g9q5-3vv9-mx45

XPath injection vulnerability in Epic MyChart allows remote attackers to access contents…

MEDIUM 52

XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.asp.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.20884 Published 2018-02-20 No fix listed CWE-91

TI-2003-00308 CVE-2003-0328 · GHSA-hvrc-56qp-9hgv

EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote…

MEDIUM 44

EPIC IRC Client (EPIC4) pre2.002, pre2.003, and possibly later versions, allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via a CTCP request from a large nickna…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.08618 Published 2003-05-22 Fixed

TI-2003-00304 CVE-2003-0324 · GHSA-88jf-xx4f-mf96

Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to…

LOW 38

Buffer overflows in EPIC IRC Client (EPIC4) 1.0.1 allows remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies that are not properly handled by the (1) use…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02512 Published 2003-05-22 No fix listed

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0