CVE-2024-50589

7.5 highEPSS 0.6%

High (7.5). EPSS 0.6% chance of exploitation in the next 30 days.

An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Healthcare Interoperability Resources (FHIR) API to get access to sensitive electronic health records (EHR).

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2024-11-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://hasomed.de/produkte/elefant/
https://r.sec-consult.com/hasomed
http://seclists.org/fulldisclosure/2024/Nov/3

Check your stack JSON