Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-113873SmileCDR HAPI FHIR · Data Amplification High7.5EPSS 0.5%2026-10-22CVE Database V5CVE-2026-113873 SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain services when decompressed. EPSS 0.5%Vulnerability SmileCDR #cwe-409	CVE Database V5	2026-10-22
Critical	9.8	EPSS 1.9%	CVE-2024-51132hapi-fhir · n/a Critical9.8EPSS 1.9%2024-11-05CVE Database V5CVE-2024-51132 An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities. EPSS 1.9%Vulnerability	CVE Database V5	2024-11-05

Page 1 of 1