CVE-2019-6562

2019-05-0118:23:11

CWE-79

icscert

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.7%

JSON

In Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

CNA Affected

[
  {
    "product": "Philips Tasy EMR",
    "vendor": "Philips",
    "versions": [
      {
        "status": "affected",
        "version": "Tasy EMR Versions 3.02.1744 and prior."
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSMA-19-120-01