CVE-2020-14525CWE-83

Philips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in a Web Page

Low · published September 18, 2020

CVSS v3.1
3.5
EPSS
0%
Percentile
39.9
In the wild
Unconfirmed
What it is

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input

before it is placed in output used as a webpage that is served to other

users.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00472 · 39.9th percentile
Weakness
CWE-83 · Improper Neutralization of Script in Attributes in a Web Page
Published
2020-09-18T17:48Z
EPSS history
Timeline
  • 18 SEP 17:48Z
    Philips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in a Web Page
    cvelistv5