High severity7.8NVD Advisory· Published Jul 8, 2024· Updated Jun 17, 2026

CVE-2024-37999

Description

A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The affected application executes as a trusted account with high privileges and network access. This could allow an authenticated local attacker to escalate privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Siemens Foundation/Medicalis Workflow Orchestratorcpe-rescue3 versions
0+ 2 more
- (no CPE)range: 0
- (no CPE)range: All versions
- cpe:2.3:a:siemens:medicalis_workflow_orchestrator:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-501799nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000