Epic

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Epic records in CISA KEV

No Epic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Epic4 2 records MEDIUM Mychart 1 record MEDIUM

Records

1 record in Mychart · all components

TI-2016-05374 CVE-2016-6272 · GHSA-g9q5-3vv9-mx45

XPath injection vulnerability in Epic MyChart allows remote attackers to access contents…

MEDIUM 52

XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display strings, such as field labels, via the topic parameter to help.asp.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.20884 Published 2018-02-20 No fix listed CWE-91

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0