Skip to content
Noroxi

medhost records

5 published records for vendor medhost.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2016-4328
    40Plan

    MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for r

    CriticalCVSS 9.8No exploitEPSS 4%

    medhost · perioperative information management systemJun 9, 2016

  • CVE-2017-11743
    39Monitor

    MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer Mirth Connect management access.

    CriticalCVSS 9.8No exploitEPSS 2%

    medhost · connexJul 31, 2017

  • CVE-2017-11614
    39Monitor

    MEDHOST Connex contains hard-coded credentials that are used for customer database access.

    CriticalCVSS 9.8No exploitEPSS 1%

    medhost · connexJul 25, 2017

  • CVE-2017-11693
    36Monitor

    MEDHOST Document Management System contains hard-coded credentials that are used for customer database access.

    CriticalCVSS 9.1No exploitEPSS 1%

    medhost · medhost document management systemJul 28, 2017

  • CVE-2017-11694
    36Monitor

    MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access.

    CriticalCVSS 9.1No exploitEPSS 1%

    medhost · medhost document management systemJul 28, 2017