Skip to content
OpenAdvisories
Medium ICSMA-20-261-01 5 CVEs

ICSMA-20-261-01_Philips Clinical Collaboration Platform

Published Sep 17, 2020 · Updated Sep 17, 2020

Vendor: Philips Product: Clinical Collaboration Platform

Summary

Northridge Hospital Medical Center reported these vulnerabilities to Philips.

Vulnerabilities 5

  • Medium 6.8
    CVE-2020-16247

    Philips Clinical Collaboration Platform Configuration

    Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

    Philips Clinical Collaboration Platform
  • Medium 6.5
    CVE-2020-16200

    Philips Clinical Collaboration Platform Algorithm Downgrade

    Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustio…

    Philips Clinical Collaboration Platform
  • Medium 5.0
    CVE-2020-16198

    Philips Clinical Collaboration Platform Protection Mechanism Failure

    When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or insufficiently proves the claim is correct.

    Philips Clinical Collaboration Platform
  • Low 3.5
    CVE-2020-14525

    Philips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in a Web Page

    Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage that is served to other users.

    Philips Clinical Collaboration Platform
  • Low 3.4
    CVE-2020-14506

    Philips Clinical Collaboration Platform Cross-site Request Forgery

    Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.

    Philips Clinical Collaboration Platform

Revision history

  1. #1

    ICSMA-20-261-01 Philips Clinical Collaboration Platform

References