CVE-2018-8863CWE-200

Philips EncoreAnywhere Exposure of Sensitive Information to an Unauthorized Actor

Medium · published November 9, 2023

CVSS v3.1
5.9
EPSS
1%
Percentile
44.3
In the wild
Unconfirmed
What it is

The HTTP header in Philips EncoreAnywhere contains data an attacker may be able to use to gain sensitive information.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00539 · 44.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-11-09T22:46Z
EPSS history
Timeline
  • 09 NOV 22:46Z
    Philips EncoreAnywhere Exposure of Sensitive Information to an Unauthorized Actor
    cvelistv5