Philips Clinical Collaboration Platform vulnerabilities
8 vulnerabilities
Known vulnerabilities in Philips Clinical Collaboration Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-27953philipsclinical_collaboration_platform
EPSS score0.36%
An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the session management component.CVE-2025-27955philipsclinical_collaboration_platformEPSS score0.34%
Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information and execute arbitrary code.CVE-2025-27954philipsclinical_collaboration_platformEPSS score0.36%
An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the usertoken function of default.aspx.CVE-2020-16247philipsclinical_collaboration_platformEPSS score0.36%
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior,
exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.CVE-2020-16198philipsclinical_collaboration_platformEPSS score0.56%
When an attacker claims to have a given identity,
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior,
does not prove or insufficiently proves the claim is correct.CVE-2020-16200philipsclinical_collaboration_platformEPSS score0.62%
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior,
does not properly control the allocation and maintenance of a limited
resource, thereby enabling an attacker to influence the amount of
resources consumed, eventually leading to the exhaustion of available
resources.CVE-2020-14525philipsclinical_collaboration_platformEPSS score0.47%
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input
before it is placed in output used as a webpage that is served to other
users.CVE-2020-14506philipsclinical_collaboration_platformEPSS score0.29%
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.