CVE-2020-16198

When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or insufficiently proves the claim is correct...

Input validation

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...

Design/Logic Flaw

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage that is served to other users...

Design/Logic Flaw

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustion of available resources...

CVE-2020-16247 Philips Clinical Collaboration Platform Configuration

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource...

CVE-2020-16247

The CVE-2020-16247 vulnerability affects Philips Clinical Collaboration Platform (rebranded as Philips Clinical Collaboration Platform; affected versions 12.2.1 and prior). The root cause is Improper Access Control: the product exposes a resource to the wrong control sphere, allowing unintended a...

CVE-2020-16200 Philips Clinical Collaboration Platform Algorithm Downgrade

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustion of available resources...

CVE-2020-16200

Philips Clinical Collaboration Platform, versions 12.2.1 and earlier, is affected by CVE-2020-16200 (Algorithm Downgrade). The vulnerability stems from improper control of limited resources, enabling an attacker to influence resource consumption and exhaust availability (impact: HIGH). The root c...

CVE-2020-16198

Philips Clinical Collaboration Platform (HMI data management) versions 12.2.1 and earlier are affected by CVE-2020-16198. The root cause is insufficient verification of claimed identities, i.e., aProtection Mechanism Failure that does not adequately prove identity. Mitigations include Philips pat...

CVE-2020-16198 Philips Clinical Collaboration Platform Protection Mechanism Failure

When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or insufficiently proves the claim is correct...

CVE-2020-14525 Philips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in a Web Page

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage that is served to other users...

CVE-2020-14525

CVE-2020-14525 affects Philips Clinical Collaboration Platform (versions 12.2.1 and earlier). The vulnerability stems from improper neutralization of user-controllable input in output used as a webpage, i.e., an input validation/escaping issue (CWE-83) that could render user-supplied data in HTML...

CVE-2020-14506 Philips Clinical Collaboration Platform Cross-site Request Forgery

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...

CVE-2020-14506

CVE-2020-14506 affects Philips Clinical Collaboration Platform (versions 12.2.1 and prior). The issue is a CSRF vulnerability stemming from improper input validation, allowing non-validated input to be used in processing and potentially enabling unauthorized actions when a user is authenticated. ...

Philips Clinical Collaboration Platform Input Validation Error Vulnerability

Clinical Collaboration Platform is a clinical healthcare collaboration platform from Philips in the Netherlands. An input validation error vulnerability exists in Clinical Collaboration Platform version 12.2.1 and above. The vulnerability stems from the network system or product not properly...

Philips Clinical Collaboration Platform Cross-Site Request Forgery Vulnerability

Clinical Collaboration Platform is an HMI data management platform. A cross-site request forgery vulnerability exists in Clinical Collaboration Platform version 12.2.1 and earlier. An attacker can exploit this vulnerability to conduct cross-site request forgery attacks...

Philips Clinical Collaboration Platform Improper Access Control Vulnerability

Philips Clinical Collaboration Platform is an HMI data management platform. An improper access control vulnerability exists in Philips Clinical Collaboration Platform version 12.2.1 and earlier. An attacker could exploit the vulnerability to gain unauthorized access to resources...

PT-2020-14049 · Philips · Philips Clinical Collaboration Platform

Name of the Vulnerable Software and Affected Versions: Philips Clinical Collaboration Platform versions 12.2.1 and prior Description: The issue arises because the product does not properly validate input or data it receives, which can lead to incorrect processing. Recommendations: For versions...

CVE-2020-14525: Improper Neutralization of Script in Attributes in a Web Page

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage that is served to other users...

CVE-2020-14506: Cross-Site Request Forgery (CSRF)

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly...