Login Request a demo
PH
Vendor
Philips
98 products with CVEs on record
275
CVEs
2
On KEV
0
New 30D
Products
IP
Intellispace Portal
Philips
9.8
11 CVEs2 on KEV0 new
PI
Patient Information Center IX
Philips
8.8
11 CVEs0 on KEV0 new
EF
E-alert Firmware
Philips
9.8
10 CVEs0 on KEV0 new
HB
Hue Bridge V2 Firmware
Philips
8.8
9 CVEs0 on KEV0 new
VP
Vue Pacs
Philips
9.8
9 CVEs0 on KEV0 new
CC
Clinical Collaboration Platform
Philips
7.1
8 CVEs0 on KEV0 new
HB
Hue Bridge
Philips
8.8
8 CVEs0 on KEV0 new
MY
Myvue
Philips
9.8
8 CVEs0 on KEV0 new
SP
Speech
Philips
9.8
8 CVEs0 on KEV0 new
VM
Vue Motion
Philips
9.8
8 CVEs0 on KEV0 new
IM
Intellivue Mx100 Firmware
Philips
8.3
5 CVEs0 on KEV0 new
IM
Intellivue Mx400 Firmware
Philips
8.3
5 CVEs0 on KEV0 new
IM
Intellivue Mx550 Firmware
Philips
8.3
5 CVEs0 on KEV0 new
IM
Intellivue Mx700 Firmware
Philips
8.3
5 CVEs0 on KEV0 new
IM
Intellivue Mx800 Firmware
Philips
8.3
5 CVEs0 on KEV0 new
IX
Intellivue X2 Firmware
Philips
8.3
5 CVEs0 on KEV0 new
IX
Intellivue X3 Firmware
Philips
8.3
5 CVEs0 on KEV0 new
IC
Intellispace Cardiovascular
Philips
7.8
4 CVEs0 on KEV0 new
PF
Performancebridge Focal Point
Philips
8.8
4 CVEs0 on KEV0 new
AF
Avalon Fetal/maternal Monitors Fm20 Firmware
Philips
8.3
3 CVEs0 on KEV0 new
AF
Avalon Fetal/maternal Monitors Fm30 Firmware
Philips
8.3
3 CVEs0 on KEV0 new
AF
Avalon Fetal/maternal Monitors Fm40 Firmware
Philips
8.3
3 CVEs0 on KEV0 new
AF
Avalon Fetal/maternal Monitors Fm50 Firmware
Philips
8.3
3 CVEs0 on KEV0 new
BC
Brilliance CT Big Bore Firmware
Philips
8.8
3 CVEs0 on KEV0 new
BF
Brilliance Firmware 64
Philips
8.8
3 CVEs0 on KEV0 new
BI
Brilliance Ict Firmware
Philips
8.8
3 CVEs0 on KEV0 new
BI
Brilliance Ict SP Firmware
Philips
8.8
3 CVEs0 on KEV0 new
IB
In.sight B120\37
Philips
9.8
3 CVEs0 on KEV0 new
IE
Intellibridge Ec40 Firmware
Philips
8.8
3 CVEs0 on KEV0 new
IE
Intellibridge Ec80 Firmware
Philips
8.8
3 CVEs0 on KEV0 new
IM
Intellivue Mp2 Firmware
Philips
8.3
3 CVEs0 on KEV0 new
IM
Intellivue Mp30 Firmware
Philips
8.3
3 CVEs0 on KEV0 new
IM
Intellivue Mp50 Firmware
Philips
8.3
3 CVEs0 on KEV0 new
IM
Intellivue Mp70 Firmware
Philips
8.3
3 CVEs0 on KEV0 new
IM
Intellivue Mx450 Firmware
Philips
8.3
3 CVEs0 on KEV0 new
IM
Intellivue Mx500 Firmware
Philips
8.3
3 CVEs0 on KEV0 new
IN
Intellivue Np90 Firmware
Philips
8.3
3 CVEs0 on KEV0 new
M1
Mri 1.5t Firmware
Philips
5.5
3 CVEs0 on KEV0 new
M3
Mri 3t Firmware
Philips
5.5
3 CVEs0 on KEV0 new
SV
Suresigns Vs4 Firmware
Philips
4.9
3 CVEs0 on KEV0 new
XC
Xcelera
Philips
7.8
3 CVEs0 on KEV0 new
A6
Alice 6 Firmware
Philips
9.8
2 CVEs0 on KEV0 new
DO
Dosewise
Philips
9.1
2 CVEs0 on KEV0 new
DD
Dtr3502bfta Dvb-t2 Firmware
Philips
7.8
2 CVEs0 on KEV0 new
IM
Intellivue MP Monitors Mp2/x2 Firmware
Philips
7.2
2 CVEs0 on KEV0 new
IM
Intellivue MP Monitors Mp20-mp90 Firmware
Philips
7.2
2 CVEs0 on KEV0 new
IM
Intellivue MP Monitors Mp5/5sc Firmware
Philips
7.2
2 CVEs0 on KEV0 new
IM
Intellivue MP Monitors Mx800/700/600 Firmware
Philips
7.2
2 CVEs0 on KEV0 new
IM
Intellivue Mp2-mp90 Firmware
Philips
6.5
2 CVEs0 on KEV0 new
IM
Intellivue Mx40 Firmware
Philips
6.5
2 CVEs0 on KEV0 new
IM
Intellivue Mx600 Firmware
Philips
6.5
2 CVEs0 on KEV0 new
IM
Intellivue Mx750 Firmware
Philips
6.5
2 CVEs0 on KEV0 new
IM
Intellivue Mx850 Firmware
Philips
6.5
2 CVEs0 on KEV0 new
PT
Pagewriter Tc10 Firmware
Philips
6.2
2 CVEs0 on KEV0 new
PT
Pagewriter Tc20 Firmware
Philips
6.2
2 CVEs0 on KEV0 new
PT
Pagewriter Tc30 Firmware
Philips
6.2
2 CVEs0 on KEV0 new
PT
Pagewriter Tc50 Firmware
Philips
6.2
2 CVEs0 on KEV0 new
PT
Pagewriter Tc70 Firmware
Philips
6.2
2 CVEs0 on KEV0 new
TE
Tasy Electronic Medical Record
Philips
8.8
2 CVEs0 on KEV0 new
TE
Tasy Emr
Philips
5.4
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-3562
HB
Hue Bridge
Philips
8.8
0%
Mar 13Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability
CVE-2026-3561
HB
Hue Bridge
Philips
8.0
1%
Mar 13Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-3560
HB
Hue Bridge
Philips
8.8
1%
Mar 13Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-3559
HB
Hue Bridge
Philips
8.1
1%
Mar 13Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability
CVE-2026-3558
HB
Hue Bridge
Philips
8.1
1%
Mar 13Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability
CVE-2026-3557
HB
Hue Bridge
Philips
8.0
1%
Mar 13Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-3556
HB
Hue Bridge
Philips
8.8
1%
Mar 13Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-3555
HB
Hue Bridge
Philips
8.0
0%
Mar 13Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2025-27955
CC
Clinical Collaboration Platform
Philips
6.5
0%
Jun 2Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information…
CVE-2025-27954
CC
Clinical Collaboration Platform
Philips
6.5
0%
Jun 2An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the usertoken function of default.aspx
CVE-2025-27953
CC
Clinical Collaboration Platform
Philips
6.5
0%
Jun 2An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the session management component
CVE-2023-40704
VP
Vue Pacs
Philips
9.8
0%
Jul 18The product does not require unique and complex passwords to be created during installation
CVE-2018-8863
EN
Encoreanywhere
Philips
7.5
1%
Nov 9The HTTP header in Philips EncoreAnywhere contains data an attacker may be able to use to gain sensitive information
CVE-2021-39369
VM
Vue Motion
Philips
6.5
1%
Dec 26In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored outside of the web…
CVE-2021-32966
IS
Interoperability Solution Xds
Philips
7.5
0%
May 25Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use…
CVE-2022-0922
EF
E-alert Firmware
Philips
6.5
0%
Apr 1The software does not perform any authentication for critical system functionality
CVE-2021-33024
SP
Speech
Philips
7.5
1%
Apr 1Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure method susceptible to unauthorized interception and/or…
CVE-2021-33022
SP
Speech
Philips
7.5
1%
Apr 1Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors
CVE-2021-33020
MY
Myvue
Philips
7.5
1%
Apr 1Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing…
CVE-2021-33018
MY
Myvue
Philips
7.5
1%
Apr 1The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sensitive…
CVE-2021-27501
MY
Myvue
Philips
9.8
1%
Apr 1Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the…
CVE-2021-27497
MY
Myvue
Philips
9.8
1%
Apr 1Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product
CVE-2021-27493
MY
Myvue
Philips
6.5
1%
Apr 1Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before…
CVE-2021-23173
EN
Engage
Philips
4.3
1%
Jan 10The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data
CVE-2021-43552
PI
Patient Information Center IX
Philips
5.5
0%
Dec 27The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC iX) Versions B.02,…
CVE-2021-43550
PI
Patient Information Center IX
Philips
6.5
0%
Dec 27The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between…
CVE-2021-43548
PI
Patient Information Center IX
Philips
6.5
0%
Dec 27Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the properties required to…
CVE-2021-33017
IE
Intellibridge Ec40 Firmware
Philips
8.8
0%
Dec 27The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel that does not require…
CVE-2021-32993
IE
Intellibridge Ec40 Firmware
Philips
8.8
0%
Dec 27IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inbound authentication,…
CVE-2021-42744
M1
Mri 1.5t Firmware
Philips
5.5
0%
Nov 19Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor
CVE-2021-26262
M1
Mri 1.5t Firmware
Philips
5.5
1%
Nov 19Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor
CVE-2021-26248
M3
Mri 3t Firmware
Philips
5.5
0%
Nov 19Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor
CVE-2021-39376
TE
Tasy Electronic Medical Record
Philips
8.8
1%
Aug 24Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the CorCad_F2/executaConsultaEspecifico IE_CORPO_ASSIST or CD_USUARIO_CONVENIO parameter
CVE-2021-39375
TE
Tasy Electronic Medical Record
Philips
8.8
1%
Aug 24Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValue parameter
CVE-2020-27298
CT
Coronary Tools
Philips
6.5
1%
Jan 26Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), ViewForum (Release 6.3V1L10)
CVE-2018-7580
HF
Hue Firmware
Philips
7.5
2%
Dec 21Philips Hue is vulnerable to a Denial of Service attack
CVE-2020-16247
CC
Clinical Collaboration Platform
Philips
7.1
0%
Sep 18Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the…
CVE-2020-16200
CC
Clinical Collaboration Platform
Philips
6.5
1%
Sep 18Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker…
CVE-2020-16198
CC
Clinical Collaboration Platform
Philips
6.3
1%
Sep 18When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or insufficiently proves the claim is…
CVE-2020-14525
CC
Clinical Collaboration Platform
Philips
3.5
0%
Sep 18Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a…
CVE-2020-14506
CC
Clinical Collaboration Platform
Philips
4.3
0%
Sep 18Philips Clinical Collaboration Platform, Versions 12.2.1 and prior
CVE-2020-16224
PI
Patient Information Center IX
Philips
6.5
1%
Sep 11In Patient Information Center iX (PICiX) Versions C.02, C.03, the software parses a formatted message or structure but does not handle or incorrectly handles a length field that…
CVE-2020-16220
PI
Patient Information Center IX
Philips
4.3
0%
Sep 11In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be well-formed (i.e., to…
CVE-2020-16216
PI
Patient Information Center IX
Philips
6.5
1%
Sep 11In IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, MX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior, the product receives input or data…
CVE-2020-16212
PI
Patient Information Center IX
Philips
6.8
0%
Sep 11In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate…
CVE-2020-16228
PI
Patient Information Center IX
Philips
6.4
0%
Sep 11In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550, MX750, MX850, and…
CVE-2020-16222
PI
Patient Information Center IX
Philips
8.8
1%
Sep 11In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identity, the software…
CVE-2020-16218
PI
Patient Information Center IX
Philips
3.5
1%
Sep 11In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in…
CVE-2020-16214
PI
Patient Information Center IX
Philips
5.0
1%
Sep 11In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value (CSV) file, but it does not…
CVE-2020-11618
DD
Dtr3502bfta Dvb-t2 Firmware
Philips
7.8
0%
Aug 31THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their TELNET service hardcoded to start on boot, which allows an attacker on the local network to…
CVE-2020-11617
DD
Dtr3502bfta Dvb-t2 Firmware
Philips
5.9
0%
Aug 31The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn't validate the SSL certificates of RSS servers, which allows a…
CVE-2020-16241
SV
Suresigns Vs4 Firmware
Philips
2.1
0%
Aug 21Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor
CVE-2020-16239
SV
Suresigns Vs4 Firmware
Philips
4.9
1%
Aug 21When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct
CVE-2020-16237
SV
Suresigns Vs4 Firmware
Philips
2.1
0%
Aug 21Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data…
CVE-2020-14518
DR
Dreammapper
Philips
5.3
1%
Aug 21Philips DreamMapper, Version 2.24 and prior
CVE-2020-7360
SM
Smartcontrol
Philips
7.3
0%
Aug 13An Uncontrolled Search Path Element (CWE-427) vulnerability in SmartControl version 4.3.15 and versions released before April 15, 2020 may allow an authenticated user to escalate…
CVE-2020-14477
E7
Epiq 7 Firmware
Philips
4.4
0%
Jun 26In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti Versions VM5.0 and prior, Ultrasound Sparq Version 3.0.2…
CVE-2020-12023
IE
Intellibridge Enterprise
Philips
4.5
1%
Jun 11Philips IntelliBridge Enterprise (IBE), Versions B.12 and prior, IntelliBridge Enterprise system integration with SureSigns (VS4), EarlyVue (VS30) and IntelliVue Guardian (IGS)
CVE-2020-6007
HB
Hue Bridge V2 Firmware
Philips
7.9
2%
Jan 23Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase,…
CVE-2019-18263
PF
Pulsera Firmware
Philips
6.5
0%
Dec 20An issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity (718132) with wireless option (shipped between 2016-August 2018), Veradius Unity…