Clinical Collaboration Platform

clinical_collaboration_platform

Vendor: Philips • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-27955 1Philips 1Clinical Collaboration Platform Jun 17, 2026 Jun 2, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information and execute arbitrary code.
CVE-2025-27954 1Philips 1Clinical Collaboration Platform Jun 17, 2026 Jun 2, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the usertoken function of default.aspx.
CVE-2025-27953 1Philips 1Clinical Collaboration Platform Jun 17, 2026 Jun 2, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the session management component.
CVE-2020-16247 1Philips 1Clinical Collaboration Platform Jun 17, 2026 Sep 18, 2020 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
CVE-2020-16200 1Philips 1Clinical Collaboration Platform Jun 17, 2026 Sep 18, 2020 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources co...Show more Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.Show less
CVE-2020-16198 1Philips 1Clinical Collaboration Platform Jun 17, 2026 Sep 18, 2020 N/A· v4 6.3 MEDIUM· v3 5.8 MEDIUM· v2 When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or insufficiently proves the claim is correct.
CVE-2020-14525 1Philips 1Clinical Collaboration Platform Jun 17, 2026 Sep 18, 2020 N/A· v4 3.5 LOW· v3 2.7 LOW· v2 Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage that is served to other users.
CVE-2020-14506 1Philips 1Clinical Collaboration Platform Jun 17, 2026 Sep 18, 2020 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data saf...Show more Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.Show less