Security Advisory

CVE-2026-66300

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-04 18:51:27
Last updated 2026-08-04 18:58:36
Assigner cisa-cg
CVSS score not scored
State PUBLISHED

Description

SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. An attacker can inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link. Fixed in 10.12.2 and 10.9.3.