Philips Clinical Collaboration Platform — known CVE vulnerabilities

Every CVE whose affected-product data names Philips Clinical Collaboration Platform, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2020-16247 — CVSS 6.8 (medium): Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended…
• CVE-2025-27955 — CVSS 6.5 (medium): Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote…
• CVE-2020-16200 — CVSS 6.5 (medium): Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited…
• CVE-2025-27953 — CVSS 6.5 (medium): An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code…
• CVE-2025-27954 — CVSS 6.5 (medium): An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code…
• CVE-2020-16198 — CVSS 5.0 (medium): When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or…
• CVE-2020-14525 — CVSS 3.5 (low): Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input…
• CVE-2020-14506 — CVSS 3.4 (low): Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or…