cve.bz

CVE-2023-43208

9.8 criticalKEVEPSS 86%

Critical (9.8) in NextGen Healthcare Mirth Connect. In CISA KEV since 2024-05-20, with known ransomware use. EPSS 86% chance of exploitation in the next 30 days.

NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-2023-37679.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
86% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2024-05-20, due 2024-06-10, known ransomware use
CWEs
CWE-78, CWE-502
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON