CVE-2020-14525

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage that is served to other users...

CVE-2020-14525

CVE-2020-14525 affects Philips Clinical Collaboration Platform (versions 12.2.1 and earlier). The vulnerability stems from improper neutralization of user-controllable input in output used as a webpage, i.e., an input validation/escaping issue (CWE-83) that could render user-supplied data in HTML...

ICSMA-20-261-01_Philips Clinical Collaboration Platform

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Low skill level to exploit Vendor: Philips Equipment: Clinical Collaboration Platform Vulnerabilities: Cross-site Request Forgery, Improper Neutralization of Script in Attributes in a Web Page, Protection Mechanism Failure, Algorithm Downgrade,...