Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2024-6795

Vulnerability in Baxter Connex Health Portal

In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal's database.  An attacker could have submitted a crafted payload to Connex portal that could have resulted in modification and disclosure of database content and/or perform administrative operations including shutting down the database.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed
Vendors
Baxter Hillrom
Products
Connex Health Portal Connex Health Portal
CVE-2024-6796

Vulnerability in Baxter Connex Health Portal

In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex portal's database and/or modify content.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Baxter Hillrom
Products
Connex Health Portal Connex Health Portal