Read the docs
TI-2020-11357 Aliases CVE-2020-14506GHSA-2955-cp7r-7qw6

Philips Clinical Collaboration Platform Cross-site Request Forgery

Priority LOW 20CWE-352Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Tampering
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-352.

Summary

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.

Why it matters now

EPSS 0.00288 21st percentileScored 2026-11-07
Fix Fixed Clinical Collaboration Platform (Philips): 12.2.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
PhilipsClinical Collaboration Platformbefore 12.2.112.2.1Patch availableCNA
  • Clinical Collaboration Platform VendorPhilips Affected before 12.2.1 Fixed in 12.2.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:philips:clinical_collaboration_platform:*:*:*:*:*:*:*:*up to 12.2.1VulnerablePhilips
  • cpe:2.3:a:philips:clinical_collaboration_platform:*:*:*:*:*:*:*:* Versions up to 12.2.1 Vulnerable ·Philips

Remediation

  • Fix · CNA Clinical Collaboration Platform (Philips) Fixed in 12.2.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Philips Clinical Collaboration Platform 12.2.1

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2020-12776 Philips Clinical Collaboration Platform ConfigurationPriority LOW 31
    • TI-2020-12729 Philips Clinical Collaboration Platform Algorithm DowngradePriority LOW 30
    • TI-2020-12727 Philips Clinical Collaboration Platform Protection Mechanism FailurePriority LOW 29
    Show all 5 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-14506
  2. 2026-10-03 Alias added: GHSA-2955-cp7r-7qw6

References

Advisory 1

Other 1

  • TI-2025-20664 Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token… CVSS 3.1MEDIUM 6.5
  • TI-2025-20663 An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain… CVSS 3.1MEDIUM 6.5
  • TI-2025-20662 An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain… CVSS 3.1MEDIUM 6.5
  • TI-2020-12776 Philips Clinical Collaboration Platform Configuration CVSS 3.1HIGH 7.1
  • TI-2020-12729 Philips Clinical Collaboration Platform Algorithm Downgrade CVSS 3.1MEDIUM 6.5
  • TI-2020-12727 Philips Clinical Collaboration Platform Protection Mechanism Failure CVSS 3.1MEDIUM 6.3
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences