Cross-Site Scripting Vulnerability in HL7 C-CDA by HL7
CVE-2014-3861

Currently unrated

Key Information:

Vendor: Hl7
Status: C-cda
Vendor: CVE Published:; 2 September 2014

What is CVE-2014-3861?

A vulnerability exists in the CDA.xsl file of HL7 C-CDA 1.1 and earlier versions, allowing remote attackers to exploit Cross-Site Scripting (XSS). By injecting crafted reference elements within a nonXMLBody element, these attackers can execute arbitrary web scripts or HTML, posing significant risks to web security. This vulnerability underlines the importance of securing web applications against XSS attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch