CVE-2022-3956

9.8 criticalEPSS 0.7%

Critical (9.8) in hhims project hhims. EPSS 0.7% chance of exploitation in the next 30 days.

A vulnerability classified as critical has been found in tsruban HHIMS 2.1. Affected is an unknown function of the component Patient Portrait Handler. The manipulation of the argument PID leads to sql injection. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. VDB-213462 is the identifier assigned to this vulnerability.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWEs: CWE-89, CWE-707
Published: 2022-11-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hhims_project:hhims

References

https://github.com/tsruban/HHIMS/issues/1
https://vuldb.com/?id.213462
https://github.com/tsruban/HHIMS/issues/1
https://vuldb.com/?id.213462

Check your stack JSON