VYPR
Vendor

Medhost

Products
3
CVEs
5
Across products
5
Status
Private

Products

3

Recent CVEs

5
  • CVE-2017-11743CriJul 31, 2017
    risk 0.64cvss 9.8epss 0.02

    MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer Mirth Connect management access. An attacker with knowledge of the hard-coded credential and the ability to communicate directly with the Mirth Connect management console may be able to…

  • CVE-2017-11614CriJul 25, 2017
    risk 0.64cvss 9.8epss 0.01

    MEDHOST Connex contains hard-coded credentials that are used for customer database access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with the database may be able to obtain or modify sensitive patient and financial…

  • CVE-2016-4328CriJun 10, 2016
    risk 0.64cvss 9.8epss 0.04

    MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct requests to the application database server.

  • CVE-2017-11694CriJul 28, 2017
    risk 0.59cvss 9.1epss 0.01

    MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with Apache Solr may be able to obtain or modify sensitive patient and…

  • CVE-2017-11693CriJul 28, 2017
    risk 0.59cvss 9.1epss 0.01

    MEDHOST Document Management System contains hard-coded credentials that are used for customer database access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with the database may be able to obtain or modify sensitive patient and…