Softneta

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Softneta records in CISA KEV

No Softneta vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Meddream Pacs 2 records MEDIUM

Records

3 records

TI-2018-15599 CVE-2018-25374 · GHSA-hgwm-p79h-vgwp

Softneta MedDream PACS Server Premium 6.7.1.1 Directory Traversal

HIGH 77

Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the path parameter.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00785 Published 2026-05-25 No fix listed CWE-22

TI-2023-21027 CVE-2023-40150 · GHSA-q7vg-5vwj-j32j

Softneta MedDream PACS Exposed Dangerous Method or Function

MEDIUM 51

Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01264 Published 2023-09-11 No fix listed CWE-749

TI-2023-20383 CVE-2023-39227 · GHSA-mxwh-28p4-8rr7

Softneta MedDream PACS Plaintext Storage of a Password

LOW 33

Softneta MedDream PACS stores usernames and passwords in plaintext.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00312 Published 2023-09-11 No fix listed CWE-256

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0