Vendors / Medhost Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Medhost records in CISA KEV No Medhost vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct requests to the appli…
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03957 · Published 2016-06-10 · No fix listed
Priority MEDIUM 45
MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer Mirth Connect management access.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01608 · Published 2017-07-31 · No fix listed CWE-798
Priority MEDIUM 44
MEDHOST Connex contains hard-coded credentials that are used for customer database access.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01103 · Published 2017-07-25 · No fix listed CWE-798
Priority MEDIUM 41
MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access.
CVSS 3.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01001 · Published 2017-07-28 · No fix listed CWE-798
Priority MEDIUM 41
MEDHOST Document Management System contains hard-coded credentials that are used for customer database access.
CVSS 3.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01001 · Published 2017-07-28 · No fix listed CWE-798
Open these records in search → All records by CVSS severity
Critical5 High0 Medium0 Low0 No CVSS0