CVE-2020-16218: philips patient_information_center_ix Cross-site Scripting
Vulnerability summary
CVE-2020-16218 is a low (CVSS 3.5) Cross-site Scripting vulnerability in philips patient_information_center_ix. EPSS estimates a 0.65% chance of exploitation in the next 30 days, higher than 50.3% of scored vulnerabilities.
Timeline
- 11-09-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is then used as a webpage and served to other users. Successful exploitation could lead to unauthorized access to patient data via a read-only web application.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.65%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
0.00 pp
From 0.65% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Philips2 products
- patient_information_center_ixb.02 | c.02 | c.03
- patient information center ix (picix)B.02 | C.02 | C.03
1 vendor · 2 products
References
2 links
us-cert.cisa.gov/ics/advisories/icsma-20-254-01X Refsource MISCThird Party AdvisoryUS Government Resource