PatchTheCVEchangehealthcare vulnerabilities
Recent CVEs affecting changehealthcare products. 2 tracked.
changehealthcare has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-09-06. Highest priority: CVE-2017-14101 (score 58/100).
- CVE-2018-18630 HIGH 7.8 UPGRADE MITIGATE A vulnerability was found in McKesson Cardiology product 13.x and 14.x
- CVE-2017-14101 CRITICAL 9.8 DOWNGRADE A security researcher found an XML External Entity (XXE) vulnerability on the Conserus Image Repository archiv
FAQ
How do I fix changehealthcare vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is changehealthcare being exploited right now?
None of the tracked changehealthcare CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which changehealthcare CVE should I patch first?
CVE-2017-14101 currently ranks highest (58/100): A security researcher found an XML External Entity (XXE) vulnerability on the Conserus Image Repository archiv.