HL
Vendor
Hl7
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-24363 | FH fhir-ig-publisher HL7 | 4.2 | Jan 24 | The HL7 FHIR IG publisher may potentially expose GitHub repo user and credential information |
| CVE-2024-52807 | FH fhir-ig-publisher HL7 | 8.6 | Jan 24 | XXE vulnerability in XSLT parsing in `org.hl7.fhir.publisher` |
| CVE-2023-24057 | FI Fhir IG Publisher Hl7 | 8.1 | Jan 26 | HL7 (Health Level 7) FHIR Core Libraries before 5.6.92 allow attackers to extract files into arbitrary directories via directory traversal from a crafted ZIP or TGZ archive (for a… |
| CVE-2014-5452 | CC C-cda Hl7 | – | Sep 2 | CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allows remote attackers to conduct XSS… |
| CVE-2014-3862 | CC C-cda Hl7 | – | Sep 2 | CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted reference element that triggers creation of an IMG element with… |
| CVE-2014-3861 | CC C-cda Hl7 | – | Sep 2 | Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted reference element… |