Dosewise Portal

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:philips:dosewise_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhilips (b8a9f1cf-d82f-5e30-aade-8a8018bb7a6f)
ProductDosewise Portal (37d24d95-8f2c-5690-af3b-f93d66215888)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9656 vulnerable 2026-06-08 05:10:10.323673 Details available
The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a database account with privileges that can affect confidentiality, integrity, and availability of the database. For an attacker to exploit this vulnerability, elevated privileges are first required for an attacker to access the web application backend system files that contain the hard-coded credentials. Successful exploitation may allow a remote attacker to gain access to the database of the DWP application, which contains PHI. CVSS v3 base score: 9.1, CVSS vector string: AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.
Published: 2018-04-24T15:00:00.000Z
Updated: 2024-09-17T00:06:52.060Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9654 vulnerable 2026-06-08 05:10:10.319128 Details available
The Philips DoseWise Portal web-based application versions 1.1.7.333 and 2.1.1.3069 stores login credentials in clear text within backend system files. CVSS v3 base score: 6.5, CVSS vector string: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
Published: 2018-04-24T15:00:00.000Z
Updated: 2024-09-17T03:43:28.188Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.