NVD

Id
33120  
Name
CVE-2014-5452  
Description
CDA.xsl in HL7 C-CDA 1.1 and earlier does not anticipate the possibility of invalid C-CDA documents with crafted XML attributes, which allows remote attackers to conduct XSS attacks via a document containing a table that is improperly handled during unrestricted xsl:copy operations.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-09-02  
Modified Date
2016-12-21  
Seq
2014-5452  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
173638 33120 CVE-2014-5452 http://gforge.hl7.org/gf/project/strucdoc/frs/?action=FrsReleaseView&release_id=1088  View
173639 33120 CVE-2014-5452 http://motorcycleguy.blogspot.com/2014/04/hl7-cda-stylesheet-patches.html  View
173640 33120 CVE-2014-5452 http://smartplatforms.org/2014/04/security-vulnerabilities-in-ccda-display/  View
173641 33120 CVE-2014-5452 http://www-01.ibm.com/support/docview.wss?uid=swg21699588  View
173642 33120 CVE-2014-5452 69633  View
173643 33120 CVE-2014-5452 1033511  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25067 JVNDB-2013-006642 HL7 C-CDA の CDA.xsl におけるクロスサイトスクリプティングの脆弱性 HL7 C-CDA の CDA.xsl は、巧妙に細工された XML 属性を持つ不正な C-CDA ドキュメントの可能性を考慮しないため、クロスサイトスクリプティング攻撃を実行される脆弱性が存在します。 CVE-2014-5452 72742 CVE-2014-5452 33120 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006642.html 2013-04-14 2014-09-03 View