CVE-2014-5452

CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allows remote attackers…

published September 2, 2014

CVSS
—
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allows remote attackers to conduct XSS attacks via a document containing a table that is improperly handled during unrestricted xsl:copy operations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02050 · 81.1th percentile
Published
2014-09-02T10:00Z
EPSS history
Timeline
  • 02 SEP 10:00Z
    CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allows remote attackers…
    cvelistv5