Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: CDAC-Noida Clear all filters
TI-2026-30801 CVE-2026-42518 · GHSA-f6hw-3rgq-5rhv

Information Disclosure Vulnerability in e-Sushrut HMIS

Priority LOW 37

This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00219 Published 2026-04-29 No fix listed CWE-321
TI-2026-30800 CVE-2026-42517 · GHSA-gq82-hp87-wfrg

Cryptographic Failure Vulnerability in e-Sushrut HMIS

Priority LOW 31

This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00226 Published 2026-04-29 No fix listed CWE-639
TI-2026-30799 CVE-2026-42516 · GHSA-fvwx-ghwg-3rm3

Broken Access Control Vulnerability in e-Sushrut HMIS

Priority LOW 31

This vulnerability exists in e-Sushrut due to improper authorization checks during resource access.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00226 Published 2026-04-29 No fix listed CWE-639
TI-2026-30797 CVE-2026-42514 · GHSA-4xx4-4wcr-v65q

Sensitive Data Exposure Vulnerability in e-Sushrut HMIS

Priority MEDIUM 43

This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00227 Published 2026-04-29 No fix listed CWE-319
TI-2026-30796 CVE-2026-42513 · GHSA-9m5v-3mgc-h8pg

Authentication Bypass Vulnerability in e-Sushrut HMIS

Priority MEDIUM 45

This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00482 Published 2026-04-29 No fix listed