Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high32CVSS 7.0–8.9
Exploited now
Sante records in CISA KEVNo Sante vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01191 · Published 2025-03-13 · Fixed in 4.2.0 CWE-121
Priority HIGH 72
A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe".
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.35383 · Published 2025-03-13 · Fixed in 4.2.0 CWE-22
Priority MEDIUM 51
Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00965 · Published 2024-05-22 · No fix listed CWE-89
Priority MEDIUM 47
This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02842 · Published 2022-08-03 · No fix listed CWE-89
Priority MEDIUM 45
The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00811 · Published 2025-08-18 · Fixed in 4.2.3 CWE-415
Priority MEDIUM 45
Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01134 · Published 2024-04-01 · No fix listed CWE-89
Priority MEDIUM 41
The Sante PACS Server Web Portal sends credential information without encryption.
CVSS 4.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00218 · Published 2025-08-18 · Fixed in 4.2.3 CWE-319
Priority MEDIUM 41
Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00915 · Published 2025-01-30 · No fix listed CWE-119
Priority MEDIUM 41
Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01049 · Published 2025-01-30 · No fix listed CWE-119
Priority MEDIUM 41
Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01049 · Published 2025-01-30 · No fix listed CWE-119
Priority LOW 34
Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01913 · Published 2025-01-30 · No fix listed CWE-22
Priority LOW 31
Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00991 · Published 2025-01-30 · No fix listed CWE-119
Priority LOW 31
Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00991 · Published 2025-01-30 · No fix listed CWE-119
Priority LOW 23
Sante PACS Server is vulnerable to stored cross-site scripting.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00212 · Published 2025-08-18 · Fixed in 4.2.3 CWE-79
Priority LOW 23
Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.01647 · Published 2025-01-30 · No fix listed CWE-22
Priority LOW 21
Sante PACS Server web portal is vulnerable to stored cross-site scripting.
CVSS 4.0MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00194 · Published 2025-08-18 · Fixed in 4.2.3 CWE-79
THREATIST.IORead the docs