Philips Dosewise vulnerabilities

2 CVEs affecting Philips Dosewise, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-9656, published 2018-04-24.

More from Philips.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-9656, published 2018-04-24. Critical severity, CVSS 9.1. EPSS: 2.2% chance of exploitation in the next 30 days. The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a database account with privileges that can affect confidentiality,…
• CVE-2017-9654, published 2018-04-24. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files. CVSS v3 base score: 6.5, CVSS vector string:…