{"id":"CVE-2020-14506","aliases":["EUVD-2020-6642","GHSA-2955-cp7r-7qw6"],"status":"published","title":"Philips Clinical Collaboration Platform Cross-site Request Forgery","description":"Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.","severity":{"version":"3.1","score":3.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00288,"percentile":0.21607,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2020-09-18T17:46:53Z","modified":"2026-06-17T02:54:53Z","products":[{"vendor":"philips","product":"clinical collaboration platform"},{"vendor":"philips","product":"clinical_collaboration_platform"}],"references":[{"url":"https://us-cert.cisa.gov/ics/advisories/icsma-20-261-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://www.philips.com/a-w/security/security-advisories/product-security-2020.html#2020_archive"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14506"},{"url":"https://github.com/advisories/GHSA-2955-cp7r-7qw6"}],"sources":{"cve":[{"id":"CVE-2020-14506","title":"Philips Clinical Collaboration Platform Cross-site Request Forgery","description":"Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.","status":"published","published":"2020-09-18T17:46:53Z","modified":"2025-06-04T20:03:25.989Z","cvss":[{"version":"3.1","score":3.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:35:46.873079Z"}],"euvd":[{"id":"EUVD-2020-6642","description":"Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.","status":"published","published":"2020-09-18T17:46:53Z","modified":"2025-06-04T20:03:25Z","cvss":[{"version":"3.1","score":3.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T20:32:29.680736Z"}],"ghsa":[{"id":"GHSA-2955-cp7r-7qw6","title":"Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or...","description":"Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.","status":"published","published":"2022-05-24T17:28:54Z","modified":"2025-06-04T21:31:01Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T15:02:34.475579Z"}],"nvd":[{"id":"CVE-2020-14506","description":"Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.","status":"published","published":"2020-09-18T18:15:16.583Z","modified":"2026-06-17T02:54:53.513Z","cvss":[{"version":"3.1","score":3.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:06:15.83396Z"}]}}