CVE-2020-16198: falha de média gravidade em Philips Clinical Collaboration Platform
Philips Clinical Collaboration Platform Protection Mechanism Failure
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5epss 0.6%
When an attacker claims to have a given identity,
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior,
does not prove or insufficiently proves the claim is correct.
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
Philips · Clinical Collaboration PlatformCVEs relacionadas — Philips Clinical Collaboration Platform
No mesmo produto, das mais perigosas para as menos.
CVE-2020-16200MEDIUMPhilips Clinical Collaboration Platform Algorithm DowngradeEPSS 0.6%CVE-2020-14525LOWPhilips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in a Web PageEPSS 0.5%CVE-2020-16247MEDIUMPhilips Clinical Collaboration Platform ConfigurationEPSS 0.4%CVE-2020-14506LOWPhilips Clinical Collaboration Platform Cross-site Request ForgeryEPSS 0.3%