ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.4), org.hspconsortium.reference:hspc-reference-api (>=0.9, <=1.0) +5 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.4)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 1.4 -...

ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (1.5) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay 1.5 Source cves: CVE-2021-32053...

org.hspconsortium.reference:hspc-reference-api (>=1.10.4, <=1.10.5), org.hspconsortium.reference:hspc-reference-api-mysql (>=1.10.4, <=1.10.8) +5 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.2.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - org.hspconsortium.reference:hspc-reference-api =1.10.4, =1.10.4, =1.10.4,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.3), ca.uhn.hapi.fhir:hapi-fhir-igpacks (4.0.3) +1 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.0.3)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.3 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.0.0, <=5.3.3), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.0.0, <=5.3.3) +15 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=5.0.0, <=5.3.3)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version =5.0.0, =5.0.0, =5.0.0, =5.3.0, =5.0.0, =5.3.0, =5.1.0, =5.3.0, =5.0.0, =5.2.0, =5.1.0, =5.3.3 - org.opencds.cqf:common 0.4.0 - org.opencds.cqf:cqf-ruler-dstu3 0.4.0 - org.opencds.cqf:cqf-ruler-r4 0.4.0 - org.opencds.cqf:dstu3 0.4.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.1.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (4.1.0) +16 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.1.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.1.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.0.1), ca.uhn.hapi.fhir:hapi-fhir-igpacks (4.0.1) +1 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (4.0.1)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.0.1 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.6.0), ca.uhn.hapi.fhir:hapi-fhir-igpacks (3.6.0) +1 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.6.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.6.0 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.5.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-migrate (3.5.0) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.5.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.5.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.8.0), ca.uhn.hapi.fhir:hapi-fhir-igpacks (3.8.0) +2 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.8.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.8.0 - ca.uhn.hapi.fhir:hapi-fhir-igpacks...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (3.4.0) potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.4.0)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 3.4.0 Source cves: CVE-2021-32053 Source...

org.hspconsortium.reference:hspc-reference-api (>=1.4.1, <=1.4.3), org.hspconsortium.reference:hspc-reference-api-mysql (>=1.4.1, <=1.4.3) +3 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (2.3)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version 2.3 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base and may be impacted: - org.hspconsortium.reference:hspc-reference-api =1.4.1, =1.4.1, =1.4.1, =1.4.1,...

Uncontrolled Resource Consumption

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

CVE-2021-32053

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

CVE-2021-32053

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

Hardcoded credentials

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

CVE-2021-32053

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

CVE-2021-32053

JPA Server in HAPI FHIR before 5.4.0 allows a user to deny service e.g., disable access to the database after the attack stops via history requests. This occurs because of a SELECT COUNT statement that requires a full index scan, with an accompanying large amount of server resources if there are...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.4.0, <=5.3.3), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=4.1.0, <=5.3.3) +34 more potentially affected by CVE-2021-32053 via ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (>=0.9, <=5.3.3)

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base MAVEN version =0.9, =3.4.0, =4.1.0, =5.3.0, =3.6.0, =5.3.0, =5.1.0, =5.3.0, =3.5.0, =4.0.0, =5.1.0, =0.9, =0.1.0-cbbf-1-additional-config-changes-1, =0.1.0-cbbf-40-cleanup-and-refactor-round-2-1, =0.9, =1.10.5 -...

CVE-2021-32053

CVE-2021-32053 affects HAPI FHIR’s JPA Server prior to 5.4.0. The issue allows denial of service through history requests: a SELECT COUNT triggers a full index scan, consuming server resources and potentially disabling access to the database when many concurrent history operations occur. Connecte...