Read the docs

MedDream

Records40All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

MedDream records in CISA KEV

No MedDream vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pacs Server 38 records MEDIUM

Records

40 records

TI-2018-15597 CVE-2018-25372 · GHSA-pjg3-5886-3fjh

MedDream PACS Server Premium 6.7.1.1 SQL Injection via email

Priority HIGH 77

MedDream PACS Server Premium 6.7.1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the email parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00305 Published 2026-05-25 No fix listed CWE-89
TI-2020-19144 CVE-2020-37009 · GHSA-hxfj-rc88-5v2p

MedDream PACS Server 6.8.3.751 - Remote Code Execution

Priority HIGH 73

MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized users to upload malicious PHP files.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00606 Published 2026-01-29 No fix listed CWE-434
TI-2025-35927 CVE-2025-58088 · GHSA-vx96-3pgw-95vh

Cross-site scripting in MedDream PACS Premium

Priority MEDIUM 60

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-03062 CVE-2025-3484 · GHSA-w65w-mj56-vjhw

Stack-based buffer overflow in MedDream PACS Server

Priority MEDIUM 51

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01044 Published 2025-05-22 No fix listed CWE-121
TI-2025-20518 CVE-2025-27724 · GHSA-55cp-gfwj-549w

Improper access control in MedDream PACS Premium

Priority MEDIUM 44

A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00559 Published 2025-07-28 No fix listed CWE-284
TI-2025-19417 CVE-2025-26469 · GHSA-798q-fhcc-4r5j

Incorrect permission assignment in MedDream PACS Premium

Priority MEDIUM 44

An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00559 Published 2025-07-28 No fix listed CWE-732
TI-2025-18208 CVE-2025-24485 · GHSA-w28g-rm5j-24w5

Server-side request forgery in MedDream PACS Premium

Priority MEDIUM 44

A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08892 Published 2025-07-28 No fix listed CWE-918
TI-2025-03061 CVE-2025-3483 · GHSA-47j8-fw62-838j

Stack-based buffer overflow in MedDream PACS Server

Priority MEDIUM 43

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00625 Published 2025-05-22 No fix listed CWE-121
TI-2025-03060 CVE-2025-3482 · GHSA-hggj-jj62-7q98

Stack-based buffer overflow in MedDream PACS Server

Priority MEDIUM 43

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0063 Published 2025-05-22 No fix listed CWE-121
TI-2025-03059 CVE-2025-3481 · GHSA-m34w-75f4-xrpc

Stack-based buffer overflow in MedDream PACS Server

Priority MEDIUM 43

MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00625 Published 2025-05-22 No fix listed CWE-121
TI-2025-23792 CVE-2025-32731 · GHSA-mj58-grhx-fvmf

Cross-site scripting in MedDream PACS Premium

Priority LOW 29

A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7.3.5.860.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00776 Published 2025-07-28 No fix listed CWE-79
TI-2025-35934 CVE-2025-58095 · GHSA-p2x3-fg55-f87f

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00369 Published 2026-01-20 No fix listed CWE-79
TI-2025-35933 CVE-2025-58094 · GHSA-79fq-f269-gxf9

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35932 CVE-2025-58093 · GHSA-4hh5-gxrj-rjh8

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35931 CVE-2025-58092 · GHSA-wpc5-5qhg-m23f

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35930 CVE-2025-58091 · GHSA-7v3h-xqqp-8hfq

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35929 CVE-2025-58090 · GHSA-j3hf-p7r2-5856

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35928 CVE-2025-58089 · GHSA-jwp3-3332-hf38

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35926 CVE-2025-58087 · GHSA-3f2v-mfqw-2824

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00369 Published 2026-01-20 No fix listed CWE-79
TI-2025-35922 CVE-2025-58080 · GHSA-83jp-f2xc-f5r2

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-35735 CVE-2025-57881 · GHSA-5mpf-xj2x-pq38

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-35670 CVE-2025-57787 · GHSA-g7m5-cg8g-x45r

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.004 Published 2026-01-20 No fix listed CWE-79
TI-2025-35669 CVE-2025-57786 · GHSA-m3q4-f6w2-4mhh

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
Load more
Open these records in search →