CVE-2016-4328

9.8 criticalEPSS 4.0%

MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct requests to the application database server.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
Published: 2016-06-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

medhost:perioperative_information_management_system

References

http://www.kb.cert.org/vuls/id/482135
http://www.kb.cert.org/vuls/id/482135

Check your stack JSON