CVEvulnerability
CVE-2020-14506
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-09-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.4 LOW — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-352
Description
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.
Affected configurations
• philips clinical collaboration platform (<= 12.2.1)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 Third Party Advisory, US Government Resource
- https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive www.philips.com
- https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01 Third Party Advisory, US Government Resource