Skip to content
OpenAdvisories

Product · FHIR

Ucum-java

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2024-55887

    Ucum-java has an XXE vulnerability in XML parsing

    Ucum-java is a FHIR Java library providing UCUM Services. In versions prior to 1.0.9, XML parsing performed by the UcumEssenceService is vulnerable to XML external entity injections. A processed XML file with a malicious DTD tag could produce XML containing d…

    FHIR Ucum-java org.fhir:ucum Maven