CVE-2017-5599

An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a reflected Cross Site Scripting vulnerability which affects the raceMasterList.jsp page within the Patient Portal. Inserted payload is rendered within the Patient Portal and the raceMasterList.jsp page does not require authentication. The vulnerability can be used to extract sensitive information or perform attacks against the user's browser. The vulnerability affects the raceMasterList.jsp page and the following parameter: race.

• CWE-79

• http://www.securityfocus.com/bid/95835
• https://gist.github.com/malerisch/8a2c195f385dff7f935db831a8dc2697Third Party Advisory
• http://www.securityfocus.com/bid/95835
• https://gist.github.com/malerisch/8a2c195f385dff7f935db831a8dc2697Third Party Advisory

Published

Jan 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5593An incorrect implementation of "XEP-0280: Message Carbons" i…
• CVE-2017-5594An issue was discovered in Pagekit CMS before 1.0.11. In thi…7.5
• CVE-2017-5595A file disclosure and inclusion vulnerability exists in web/…
• CVE-2017-5596In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX …
• CVE-2017-5597In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 d…
• CVE-2017-5598An issue was discovered in eClinicalWorks healow@work 8.0 bu…
• CVE-2017-5600The Data Warehouse component in NetApp OnCommand Insight bef…
• CVE-2017-5601An error in the lha_read_file_header_1() function (archive_r…
• CVE-2017-5602An incorrect implementation of "XEP-0280: Message Carbons" i…
• CVE-2017-5603An incorrect implementation of "XEP-0280: Message Carbons" i…
• CVE-2017-5604An incorrect implementation of "XEP-0280: Message Carbons" i…
• CVE-2017-5605An incorrect implementation of "XEP-0280: Message Carbons" i…