Known vulnerabilities in Vue PACS

Vendor: Philips
Software: Vue PACS
Software CPE: cpe:2.3:h:philips:vue_pacs:*:*:*:*:*:*:*:*
Website: https://www.philips.com
Total vulnerabilities: 13
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Vue PACS Vue PACS is affected by 13 known vulnerabilities: 6 high, 4 medium, 3 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94640 - Exposure of sensitive information to an unauthorized actor
CVE-2023-40159		 CWE-200 Medium
No
No
 12.2.8.410 22.07.2024 SB2024072224
#VU94639 - Weak Password Requirements
CVE-2023-40539		 CWE-521 Low
No
No
 12.2.8.410 22.07.2024 SB2024072224
#VU94636 - Use of Default Credentials
CVE-2023-40704		 CWE-1392 Low
No
No
 12.2.8.410 22.07.2024 SB2024072224
#VU94635 - Improper Privilege Management
CVE-2023-40223		 CWE-269 Low
No
No
 12.2.8.410 22.07.2024 SB2024072224
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 12.2.8.410 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 12.2.8.410 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU49967 - Deserialization of Untrusted Data
CVE-2021-20190		 CWE-502 High
No
No
 12.2.8.410 19.01.2021 SB2021012514
SB2021042826
SB2021050708
and 17 more
#VU49378 - Deserialization of Untrusted Data
CVE-2020-35728		 CWE-502 High
Available
No
 12.2.8.410 27.12.2020 SB2021011105
SB2021042826
SB2021050708
and 15 more
#VU29131 - Deserialization of Untrusted Data
CVE-2020-14061		 CWE-502 High
No
No
 12.2.8.410 18.06.2020 SB2020061806
SB2020070320
SB2020073033
and 15 more
#VU26494 - Deserialization of Untrusted Data
CVE-2020-10673		 CWE-502 High
Available
No
 12.2.8.410 01.04.2020 SB2020030909
SB2020073033
SB2022060909
and 17 more
#VU26490 - Deserialization of Untrusted Data
CVE-2020-11113		 CWE-502 High
Available
No
 12.2.8.410 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU18961 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12814		 CWE-200 Medium
No
No
 12.2.8.410 02.07.2019 SB2019062606
SB2019092703
SB2019100116
and 25 more
#VU10257 - Deserialization of Untrusted Data
CVE-2017-17485		 CWE-502 High
No
No
 12.2.8.410 26.01.2018 SB2017121218
SB2018021605
SB2018051725
and 24 more