Read the docs

MIM Software

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

MIM Software records in CISA KEV

No MIM Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Assistant 1 record LOW Client 1 record LOW Mim Concurrent License Server 1 record MEDIUM Mim Local Concurrent License Server 1 record MEDIUM

Records

1 record in Client · all components

TI-2023-03638 CVE-2023-3892 · GHSA-r5mr-q22m-29hf

Unsafe XML parsing of 3rd party DICOM private tags may lead to XXE

Priority LOW 32

Improper Restriction of XML External Entity Reference vulnerability in MIM Assistant and Client DICOM RTst Loading modules allows XML Entity Linking / XML External Entities Blowup.

CVSS 3.1HIGH 7.4 Adjacent network Low privileges User interaction EPSS 0.0024 Published 2023-09-19 No fix listed CWE-611
Open these records in search →