CVE-2018-8846

2018-09-2619:00:00

CWE-79

icscert

www.cve.org

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

49.8%

JSON

Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is then served to other users.

CNA Affected

[
  {
    "product": "e-Alert Unit (non-medical device)",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "R2.1 and prior"
      }
    ]
  }
]