VULNERABILITY INTELLIGENCE
CVE-2020-14506
CVSS score3.4 LOW
EPSS probability0.29%
CISA KEVNot currently listed
Published2020-09-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
Description
Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)
Primary references
- ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource