CVE-2020-14506

Philips Clinical Collaboration Platform Cross-site Request Forgery

CVSS 3.4 LOWEPSS 0.3%CWE-352

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Produtos afetados

Philips · Clinical Collaboration Platform

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive