CVE-2020-16198

When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or insufficiently proves the claim is correct...

CVE-2020-14525

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage that is served to other users...

CVE-2020-14506

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...

Design/Logic Flaw

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustion of available resources...

Design/Logic Flaw

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage that is served to other users...

Input validation

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...

CVE-2020-16247 Philips Clinical Collaboration Platform Configuration

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource...

CVE-2020-16247

The CVE-2020-16247 vulnerability affects Philips Clinical Collaboration Platform (rebranded as Philips Clinical Collaboration Platform; affected versions 12.2.1 and prior). The root cause is Improper Access Control: the product exposes a resource to the wrong control sphere, allowing unintended a...

CVE-2020-16200 Philips Clinical Collaboration Platform Algorithm Downgrade

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustion of available resources...

CVE-2020-16200

Philips Clinical Collaboration Platform, versions 12.2.1 and earlier, is affected by CVE-2020-16200 (Algorithm Downgrade). The vulnerability stems from improper control of limited resources, enabling an attacker to influence resource consumption and exhaust availability (impact: HIGH). The root c...

CVE-2020-16198

Philips Clinical Collaboration Platform (HMI data management) versions 12.2.1 and earlier are affected by CVE-2020-16198. The root cause is insufficient verification of claimed identities, i.e., aProtection Mechanism Failure that does not adequately prove identity. Mitigations include Philips pat...

CVE-2020-14525 Philips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in a Web Page

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage that is served to other users...

CVE-2020-14525

CVE-2020-14525 affects Philips Clinical Collaboration Platform (versions 12.2.1 and earlier). The vulnerability stems from improper neutralization of user-controllable input in output used as a webpage, i.e., an input validation/escaping issue (CWE-83) that could render user-supplied data in HTML...

CVE-2020-14506 Philips Clinical Collaboration Platform Cross-site Request Forgery

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...

CVE-2020-14506

CVE-2020-14506 affects Philips Clinical Collaboration Platform (versions 12.2.1 and prior). The issue is a CSRF vulnerability stemming from improper input validation, allowing non-validated input to be used in processing and potentially enabling unauthorized actions when a user is authenticated. ...

Philips Clinical Collaboration Platform Protection Mechanism Failure Vulnerability

Philips Clinical Collaboration Platform is an HMI data management platform. A protection mechanism failure vulnerability exists in Philips Clinical Collaboration Platform version 12.2.1 and earlier. The vulnerability stems from when an attacker claims to have a given identity, the software fails ...

Philips Clinical Collaboration Platform Improper Access Control Vulnerability

Philips Clinical Collaboration Platform is an HMI data management platform. An improper access control vulnerability exists in Philips Clinical Collaboration Platform version 12.2.1 and earlier. An attacker could exploit the vulnerability to gain unauthorized access to resources...

PT-2020-14049 · Philips · Philips Clinical Collaboration Platform

Name of the Vulnerable Software and Affected Versions: Philips Clinical Collaboration Platform versions 12.2.1 and prior Description: The issue arises because the product does not properly validate input or data it receives, which can lead to incorrect processing. Recommendations: For versions...

Philips Clinical Collaboration Platform Algorithm Degradation Vulnerability

Philips Clinical Collaboration Platform is an HMI data management platform. An algorithm degradation vulnerability exists in Philips Clinical Collaboration Platform version 12.2.1 and earlier. The vulnerability stems from the software failing to properly control the allocation and maintenance of...

ICSMA-20-261-01_Philips Clinical Collaboration Platform

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Low skill level to exploit Vendor: Philips Equipment: Clinical Collaboration Platform Vulnerabilities: Cross-site Request Forgery, Improper Neutralization of Script in Attributes in a Web Page, Protection Mechanism Failure, Algorithm Downgrade,...