Vendors / RainbowFish Software Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 4
Exploited now RainbowFish Software records in CISA KEV No RainbowFish Software vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 77
PacsOne Server version 6.6.2 (prior versions are likely affected) contains a directory traversal vulnerability within the web-based DICOM viewer component.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.0099 · Published 2025-11-10 · No fix listed CWE-22
Priority MEDIUM 46
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01739 · Published 2021-02-03 · No fix listed CWE-306
Priority MEDIUM 45
RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01609 · Published 2020-09-30 · No fix listed CWE-89
Priority MEDIUM 40
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0115 · Published 2021-02-03 · No fix listed CWE-89
Priority MEDIUM 40
RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01207 · Published 2020-09-30 · No fix listed CWE-434
Priority LOW 37
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02337 · Published 2021-02-03 · No fix listed CWE-22
Priority LOW 36
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.06198 · Published 2021-02-03 · No fix listed CWE-79
Priority LOW 25
RainbowFish PacsOne Server 6.8.4 allows XSS.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00551 · Published 2020-09-30 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 4 2 0 0
THREATIST.IORead the docs