Philips Tasy EMR vulnerabilities

2 CVEs affecting Philips Tasy EMR, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-13557, published 2019-11-08.

More from Philips.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-13557, published 2019-11-08. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. In Tasy EMR, Tasy WebPortal Versions 3.02.1757 and prior, there is an information exposure vulnerability which may allow a remote attacker to access system and configuration information.
• CVE-2019-6562, published 2019-05-01. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. In Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to…