SNOMED International Snowstorm vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SNOMED International Snowstorm: 1 record(s), with affected versions and fixes.
CVE-2026-66300
Medium · 5.0
CWE-79 Aug 4, 2026
SNOMED International Snowstorm reflected XSS
SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. An attacker can inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link. Fixed in 10.12.2 and 10.9.3.