Filtered by vendor Hillrom Subscriptions
Filtered by product Connex Health Portal Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-6795 2 Baxter, Hillrom 2 Connex Health Portal, Connex Health Portal 2024-09-20 10 Critical
In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal's database.  An attacker could have submitted a crafted payload to Connex portal that could have resulted in modification and disclosure of database content and/or perform administrative operations including shutting down the database.
CVE-2024-6796 2 Baxter, Hillrom 2 Connex Health Portal, Connex Health Portal 2024-09-20 8.2 High
In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized access to Connex portal's database and/or modify content.