RainbowFish Software

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

RainbowFish Software records in CISA KEV

No RainbowFish Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pacsone Server 7 records MEDIUM

Records

7 records in Pacsone Server · all components

TI-2020-17588 CVE-2020-29165 · GHSA-f935-fh29-4mfr

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access…

MEDIUM 46

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01739 Published 2021-02-03 No fix listed CWE-306

TI-2020-10234 CVE-2020-12870 · GHSA-2f4q-74mc-vp6m

RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.

MEDIUM 45

RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01609 Published 2020-09-30 No fix listed CWE-89

TI-2020-17586 CVE-2020-29163 · GHSA-wgxr-4g2j-73wf

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.

MEDIUM 40

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0115 Published 2021-02-03 No fix listed CWE-89

TI-2020-10110 CVE-2020-12715 · GHSA-vqf4-g492-5236

RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.

MEDIUM 40

RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01207 Published 2020-09-30 No fix listed CWE-434

TI-2020-17589 CVE-2020-29166 · GHSA-88w2-cjhc-67m3

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file…

LOW 37

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02337 Published 2021-02-03 No fix listed CWE-22

TI-2020-17587 CVE-2020-29164 · GHSA-qj3f-9v2m-79rj

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).

LOW 36

PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.06198 Published 2021-02-03 No fix listed CWE-79

TI-2020-10233 CVE-2020-12869 · GHSA-cw67-prcg-9fwq

RainbowFish PacsOne Server 6.8.4 allows XSS.

LOW 25

RainbowFish PacsOne Server 6.8.4 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00551 Published 2020-09-30 No fix listed CWE-79

Open these records in search →

Critical	2
High	4
Medium	2
Low	0
No CVSS	0