Skip to main content

Medhost

5 CVEs vendor

Monthly

CVE-2017-11743 Jul 31, 13:29 CRITICAL Act Now

MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer Mirth Connect management access. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Connex Medhost
NVD
CVSS 3.0
9.8
EPSS
0.8%
CVE-2017-11694 Jul 28, 13:29 CRITICAL Act Now

MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Apache Medhost Document Management System Medhost
NVD
CVSS 3.0
9.1
EPSS
0.2%
CVE-2017-11693 Jul 28, 13:29 CRITICAL Act Now

MEDHOST Document Management System contains hard-coded credentials that are used for customer database access. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass PostgreSQL Medhost Document Management System Medhost
NVD
CVSS 3.0
9.1
EPSS
0.2%
CVE-2017-11614 Jul 25, 17:29 CRITICAL Act Now

MEDHOST Connex contains hard-coded credentials that are used for customer database access. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass IBM Connex Medhost
NVD
CVSS 3.0
9.8
EPSS
0.3%
CVE-2016-4328 Jun 10, 01:59 CRITICAL Act Now

MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Perioperative Information Management System Medhost
NVD
CVSS 3.0
9.8
EPSS
0.5%
EPSS 1% CVSS 9.8
CRITICAL Act Now

MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer Mirth Connect management access. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Connex Medhost
NVD
EPSS 0% CVSS 9.1
CRITICAL Act Now

MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Apache Medhost Document Management System +1
NVD
EPSS 0% CVSS 9.1
CRITICAL Act Now

MEDHOST Document Management System contains hard-coded credentials that are used for customer database access. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass PostgreSQL Medhost Document Management System +1
NVD
EPSS 0% CVSS 9.8
CRITICAL Act Now

MEDHOST Connex contains hard-coded credentials that are used for customer database access. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass IBM Connex +1
NVD
EPSS 1% CVSS 9.8
CRITICAL Act Now

MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Perioperative Information Management System Medhost
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy