Vulnerabilities

TI-2024-36953 CVE-2024-55887 · GHSA-w9j7-phm3-f97j

Ucum-java has an XXE vulnerability in XML parsing

MEDIUM 44

Ucum-java is a FHIR Java library providing UCUM Services.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00557 Published 2024-12-13 Fixed in 1.0.9 CWE-611

TI-2021-12018 CVE-2021-32053 · GHSA-67f6-c8mx-4q2m

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access…

LOW 27

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access to the database after the attack stops) via history requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01587 Published 2021-05-10 Fixed in 5.4.0 CWE-400

TI-2019-09530 CVE-2019-12741 · GHSA-52mh-p2m2-w625

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0.

LOW 30

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01268 Published 2019-06-05 Fixed in 3.8.0 CWE-79

Vulnerabilities

Filters

Ucum-java has an XXE vulnerability in XML parsing

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service (e.g., disable access…

XSS exists in the HAPI FHIR testpage overlay module of the HAPI FHIR library before 3.8.0.