Philips Xcelera vulnerabilities

3 CVEs affecting Philips Xcelera, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-14789, published 2018-08-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-14111, published 2017-11-17. High severity, CVSS 7.2. EPSS: 2.2% chance of exploitation in the next 30 days. The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records domain authentication credentials, which if accessed allows an…
CVE-2018-14789, published 2018-08-22. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulnerability has been identified, which may…
CVE-2018-14787, published 2018-08-22. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escalated privileges could access folders which contain…