Approved changes feed: RSS · Atom

cpe:2.3:a:baxter:connex_health_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBaxter (a179c94a-1aed-5d11-8395-fe3753820594)
ProductConnex Health Portal (6e9462f2-7ce4-5e3c-a5b6-37e1de987870)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6796 vulnerable 2026-06-03 14:58:04.186754 Vulnerability in Baxter Connex Health Portal
HIGH (8.2)
In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex portal's database and/or modify content.
Published: 2024-09-09T19:28:30.647Z
Updated: 2024-09-09T20:08:22.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6795 vulnerable 2026-06-03 14:58:04.186261 Vulnerability in Baxter Connex Health Portal
CRITICAL (10)
In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal's database.  An attacker could have submitted a crafted payload to Connex portal that could have resulted in modification and disclosure of database content and/or perform administrative operations including shutting down the database.
Published: 2024-09-09T19:24:01.776Z
Updated: 2024-09-09T20:08:01.134Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.