FHIR

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

FHIR records in CISA KEV

No FHIR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hapi Fhir 2 records LOW

Records

3 records

TI-2024-36953 CVE-2024-55887 · GHSA-w9j7-phm3-f97j

Ucum-java has an XXE vulnerability in XML parsing

MEDIUM 44

Ucum-java is a FHIR Java library providing UCUM Services.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00557 Published 2024-12-13 Fixed in 1.0.9 CWE-611

TI-2019-09530 CVE-2019-12741 · GHSA-52mh-p2m2-w625

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0.

LOW 30

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01268 Published 2019-06-05 Fixed in 3.8.0 CWE-79

TI-2021-12018 CVE-2021-32053 · GHSA-67f6-c8mx-4q2m

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access…

LOW 27

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access to the database after the attack stops) via history requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01587 Published 2021-05-10 Fixed in 5.4.0 CWE-400

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0