Vulnerability · Published Sep 18, 2020 · Assigned by icscert
CVE-2020-14525Philips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in a Web Page
Low 3.5
In plain English
A low-severity security flaw in Clinical Collaboration Platform from Philips. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Severity (CVSS 3.1)3.5Low
Exploit odds (30 days)0.5%top 59.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage that is served to other users.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Philips | Clinical Collaboration Platform | 0 – before 12.2.1 |
Weakness: CWE-83 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N