汇总 cerner 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
历史漏洞主要涉及 缓冲区溢出与SQL 注入 等问题，部分漏洞可能导致 应用崩溃，并影响 软件部署与生产负载 相关场景。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2021-36385 | A SQL Injection vulnerability in Cerner Mobile Care 5.0.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via a Fullwidth Apostrophe (aka U+FF07) in the default.aspx User ID field. Arbitrary system commands can be executed through the use of xp_cmdshell. | [email protected] | 9.8 | 2.74% | 2021-08-24 | 2026-06-16 |
| CVE-2020-11677 | Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3). | [email protected] | 8.8 | 0.66% | 2020-04-29 | 2026-06-16 |
| CVE-2020-11676 | Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3). | [email protected] | 8.8 | 0.66% | 2020-04-29 | 2026-06-16 |
| CVE-2020-11675 | Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3). | [email protected] | 8.8 | 0.66% | 2020-04-29 | 2026-06-16 |
| CVE-2020-11674 | Cerner medico 26.00 allows variable reuse, possibly causing data corruption. | [email protected] | 8.8 | 0.70% | 2020-04-29 | 2026-06-16 |
| CVE-2018-20053 | An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices. The hostname, timezone, and NTP server configurations on the CCE device are vulnerable to command injection by sending a crafted configuration file over the network. | [email protected] | 9.8 | 2.20% | 2019-04-25 | 2026-06-16 |
| CVE-2018-20052 | An issue was discovered on Cerner Connectivity Engine (CCE) 4 devices. The user running the main CCE firmware has NOPASSWD sudo privileges to several utilities that could be used to escalate privileges to root. One example is the "sudo ln -s /tmp/script /etc/cron.hourly/script" command. | [email protected] | 7.8 | 0.38% | 2019-04-25 | 2026-06-16 |