Nextgen

Records2All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Nextgen records in CISA KEV

Products in the NVD configurations · select one to filter the records

2 records

TI-2023-23140 CVE-2023-43208 · GHSA-pj5c-qr29-6746

CRITICAL 100KEV

NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.85886 Published 2023-10-26 No fix listed CWE-502

TI-2023-19213 CVE-2023-37679 · GHSA-h9hg-9m55-82qp

CRITICAL 87

A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99434 Published 2023-08-03 No fix listed CWE-77