Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

38 records

Vendor: MedDream Component: Pacs Server Clear all filters
TI-2025-34571 CVE-2025-54817 · GHSA-wff8-h6gc-j62q

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-33461 CVE-2025-53516 · GHSA-pp72-xvcc-65v3

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00389 Published 2026-01-20 No fix listed CWE-79
TI-2025-34292 CVE-2025-54495 · GHSA-64fm-rg2r-rmg6

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2026-01-20 No fix listed CWE-79
TI-2025-34000 CVE-2025-54157 · GHSA-9x4q-57xr-cm5h

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2026-01-20 No fix listed CWE-79
TI-2025-34534 CVE-2025-54778 · GHSA-gwq5-fv8v-mhcp

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-29022 CVE-2025-46270 · GHSA-4p2g-vp74-5w46

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2026-01-20 No fix listed CWE-79
TI-2025-34761 CVE-2025-55071 · GHSA-pcf3-3w7x-r6cg

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.004 Published 2026-01-20 No fix listed CWE-79
TI-2025-34586 CVE-2025-54852 · GHSA-w8pc-2mpf-67rc

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.004 Published 2026-01-20 No fix listed CWE-79
TI-2025-34568 CVE-2025-54814 · GHSA-mp89-xq5g-39g9

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-34595 CVE-2025-54861 · GHSA-hxpq-9xvf-f22h

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-35735 CVE-2025-57881 · GHSA-5mpf-xj2x-pq38

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-35922 CVE-2025-58080 · GHSA-83jp-f2xc-f5r2

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-33740 CVE-2025-53854 · GHSA-h849-pmqv-qcmr

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2026-01-20 No fix listed CWE-79
TI-2025-35670 CVE-2025-57787 · GHSA-g7m5-cg8g-x45r

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.004 Published 2026-01-20 No fix listed CWE-79
TI-2025-33619 CVE-2025-53707 · GHSA-rhmf-f4mc-34h7

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00389 Published 2026-01-20 No fix listed CWE-79
TI-2025-34587 CVE-2025-54853 · GHSA-cx24-hmph-49m8

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-35669 CVE-2025-57786 · GHSA-m3q4-f6w2-4mhh

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-28549 CVE-2025-44000 · GHSA-pcw8-2ghj-w526

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the sendOruReport functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00389 Published 2026-01-20 No fix listed CWE-79
TI-2025-35934 CVE-2025-58095 · GHSA-p2x3-fg55-f87f

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00369 Published 2026-01-20 No fix listed CWE-79
TI-2025-35933 CVE-2025-58094 · GHSA-79fq-f269-gxf9

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35932 CVE-2025-58093 · GHSA-4hh5-gxrj-rjh8

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35931 CVE-2025-58092 · GHSA-wpc5-5qhg-m23f

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35930 CVE-2025-58091 · GHSA-7v3h-xqqp-8hfq

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35929 CVE-2025-58090 · GHSA-j3hf-p7r2-5856

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35928 CVE-2025-58089 · GHSA-jwp3-3332-hf38

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
Load more