Description
SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. An attacker can inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link. Fixed in 10.12.2 and 10.9.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SNOMED International | Snowstorm | 7.0.0 – < 10.12.2 | 10.12.2 |
Advisories 1
- VA-26-212-01 SNOMED International Snowstorm reflected XSS CISA ICS & IT advisories · Aug 4, 2026