Vulnerabilities

TI-2014-04450 CVE-2014-5452 · GHSA-44rr-528q-8qhv

CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA…

LOW 24

CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allows remote attackers to conduct XSS attacks via a document containing a table that…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0205 Published 2014-09-02 No fix listed CWE-79

TI-2014-03138 CVE-2014-3862 · GHSA-rwqh-j78v-fcc9

CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially…

LOW 23

CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted reference element that triggers creation of an IMG element with an arbitrary URL in its SRC attribute, lea…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01309 Published 2014-09-02 No fix listed CWE-200

TI-2014-03137 CVE-2014-3861 · GHSA-vcx3-282p-w98x

Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows…

LOW 23

Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted reference element within a nonXMLBody element.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01489 Published 2014-09-02 No fix listed CWE-79

Vulnerabilities

Filters

CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA…

CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially…

Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows…