Oviva-ag vulnerabilities

Products

• Epa4all-client 4

Newest

• oviva-ag epa4all-client epa4all-client: Unauthenticated REST API for Patient Record Writes CVE-2026-47672 6.5 MediumMay 26, 2026
• com.oviva.telematik epa4all-client epa4all-client: Improper Verification of Cryptographic Signature CVE-2026-45575 Fix available 7.4 HighMay 15, 2026
• com.oviva.telematik epa4all-client epa4all-client: TLS Certificate Validation Disabled in Production CVE-2026-45574 Fix available 8.1 HighMay 15, 2026
• com.oviva.telematik epa4all-client epa4all-client: VAU Signature bypass CVE-2026-44900 Fix available 8.1 HighMay 8, 2026