Orthanc

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Orthanc records in CISA KEV

No Orthanc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Orthanc 12 records MEDIUM Osimis Web Viewer 1 record LOW

Records

1 record in Osimis Web Viewer · all components

TI-2023-06622 CVE-2023-7238 · GHSA-rv57-pvch-f98r

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Orthanc Osimis DICOM Web Viewer

LOW 39

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-01-23 No fix listed CWE-79

Open these records in search →

Critical	4
High	9
Medium	4
Low	0
No CVSS	0