SNOMED International vulnerabilities
Published CVEs affecting SNOMED International products: 1 record(s), with severity, exploitation and fixes.
CVE-2026-66300
Medium · 5.0
CWE-79 Aug 4, 2026
SNOMED International Snowstorm reflected XSS
SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. An attacker can inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link. Fixed in 10.12.2 and 10.9.3.