<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: medhost</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2017-11694: MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access</title><link>https://patchthecve.com/cve/CVE-2017-11694.html</link><guid>https://patchthecve.com/cve/CVE-2017-11694.html</guid><pubDate>Wed, 17 Jun 2026 01:02:13 +0000</pubDate><description>CRITICAL 9.1: MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with Apache Solr may be able to obtain or modify sensitive patient and financial information. The </description></item><item><title>CVE-2017-11693: MEDHOST Document Management System contains hard-coded credentials that are used for customer database access</title><link>https://patchthecve.com/cve/CVE-2017-11693.html</link><guid>https://patchthecve.com/cve/CVE-2017-11693.html</guid><pubDate>Wed, 17 Jun 2026 01:02:13 +0000</pubDate><description>CRITICAL 9.1: MEDHOST Document Management System contains hard-coded credentials that are used for customer database access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with the database may be able to obtain or modify sensitive patient and financial informatio</description></item><item><title>CVE-2017-11614: MEDHOST Connex contains hard-coded credentials that are used for customer database access</title><link>https://patchthecve.com/cve/CVE-2017-11614.html</link><guid>https://patchthecve.com/cve/CVE-2017-11614.html</guid><pubDate>Wed, 17 Jun 2026 01:02:05 +0000</pubDate><description>CRITICAL 9.8: MEDHOST Connex contains hard-coded credentials that are used for customer database access. An attacker with knowledge of the hard-coded credentials and the ability to communicate directly with the database may be able to obtain or modify sensitive patient and financial information. Connex utilizes a</description></item><item><title>CVE-2016-4328: MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credential</title><link>https://patchthecve.com/cve/CVE-2016-4328.html</link><guid>https://patchthecve.com/cve/CVE-2016-4328.html</guid><pubDate>Wed, 17 Jun 2026 00:47:21 +0000</pubDate><description>CRITICAL 9.8: MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct requests to the application database server.</description></item></channel></rss>