CVE-2025-27954

Description

References

• intruderlabs/cvex · Third Party Advisory
• portswigger.net/kb/issues/00500700_session-token-in-url · Issue Tracking

Autres vulnérabilités de clinical collaboration platform

• CVE-2025-27955MOYENNE 6.5Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote att…
• CVE-2025-27953MOYENNE 6.5An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via…
• CVE-2020-16247ÉLEVÉE 7.1Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended …
• CVE-2020-16200MOYENNE 6.5Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited …
• CVE-2020-16198MOYENNE 6.3When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or i…