← Database

CVE-2025-27954

MEDIUM CVSS: 6.5 Published: 2025-06-02 Modified: 2026-06-17

Description

An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the usertoken function of default.aspx.

Affected Platforms

Philips Clinical Collaboration Platform

Weakness Type

CWE-77

References