TI-2018-15368 CVE-2018-25142 · GHSA-ghwc-hrr9-vj2wNovaRad NovaPACS Diagnostics Viewer 8.5 XML External Entity InjectionPriority HIGH 70NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import settings.CVSS 4.0HIGH 7.1· Network · No auth · User interaction · EPSS 0.00432 · Published 2025-12-24 · No fix listed CWE-611