sfturing hosp_order vulnerabilities
14 published CVEs name sfturing hosp_order among the affected products.
- Published CVEs
- 14
- Last 12 months
- 11
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 13Low 1Not scored 0
CVEs per yearBy the year they were published
- 20253
- 202611
Newest CVEs
- CVE-2026-96552
sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt
sfturing · hosp_order
Low2.3 - CVE-2026-96551
sfturing hosp_order CommonUserController.java cross-site request forgery
sfturing · hosp_order
Medium5.3 - CVE-2026-96550
sfturing hosp_order MailUtil.java getProperties cleartext transmission
sfturing · hosp_order
Medium6.3 - CVE-2026-96549
sfturing hosp_order CommonUserServiceImpl.java cleartext storage
sfturing · hosp_order
Medium4.8 - CVE-2026-96548
sfturing hosp_order jdbc.properties hard-coded credentials
sfturing · hosp_order
Medium6.3 - CVE-2026-95396
sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting
sfturing · hosp_order
Medium5.3 - CVE-2026-86263
sfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization
sfturing · hosp_order
Medium6.9 - CVE-2026-86262
sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization
sfturing · hosp_order
Medium6.9 - CVE-2026-86261
sfturing hosp_order Order Controller OrderController.java authorization
sfturing · hosp_order
Medium6.9 - CVE-2026-86260
sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change
sfturing · hosp_order
Medium6.9
Most common weaknesses
- CWE-74 Injection4
- CWE-89 SQL injection4
- CWE-285 Improper authorization3
- CWE-639 Authorization bypass through a user-controlled key (IDOR)3
- CWE-310 2
- CWE-259 1
- CWE-312 Cleartext storage of sensitive information1
- CWE-319 Cleartext transmission of sensitive information1
- CWE-325 1
- CWE-352 Cross-site request forgery (CSRF)1