Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

16 records

Vendor: Sante Component: Sante Pacs Server Clear all filters
TI-2025-34596 CVE-2025-54862 · GHSA-cxx7-9848-h23g

Santesoft Sante PACS Server Cross-site Scripting

Priority LOW 21

Sante PACS Server web portal is vulnerable to stored cross-site scripting.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00194 Published 2025-08-18 Fixed in 4.2.3 CWE-79
TI-2025-33813 CVE-2025-53948 · GHSA-m793-qp5h-r3xw

Santesoft Sante PACS Server Double Free

Priority MEDIUM 45

The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00811 Published 2025-08-18 Fixed in 4.2.3 CWE-415
TI-2025-01988 CVE-2025-2263 · GHSA-37r4-ppph-4wwq

Santesoft Sante PACS Server Stack-based Buffer Overflow

Priority HIGH 82

During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01191 Published 2025-03-13 Fixed in 4.2.0 CWE-121
TI-2025-00478 CVE-2025-0574 · GHSA-f5qg-pr5v-3vrq

Memory corruption in Sante PACS Server

Priority MEDIUM 41

Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00915 Published 2025-01-30 No fix listed CWE-119
TI-2025-00476 CVE-2025-0572 · GHSA-mpwr-28xv-5hw9

Path traversal in Sante PACS Server

Priority LOW 23

Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01647 Published 2025-01-30 No fix listed CWE-22
TI-2025-00477 CVE-2025-0573 · GHSA-98jq-pw4p-6xj7

Path traversal in Sante PACS Server

Priority LOW 34

Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01913 Published 2025-01-30 No fix listed CWE-22
TI-2025-00473 CVE-2025-0569 · GHSA-595r-53qq-9xfv

Memory corruption in Sante PACS Server

Priority MEDIUM 41

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01049 Published 2025-01-30 No fix listed CWE-119
TI-2025-00475 CVE-2025-0571 · GHSA-4cc5-9h6x-6wg8

Memory corruption in Sante PACS Server

Priority LOW 31

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00991 Published 2025-01-30 No fix listed CWE-119
TI-2025-00474 CVE-2025-0570 · GHSA-cfvw-fv3j-j3wv

Memory corruption in Sante PACS Server

Priority LOW 31

Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00991 Published 2025-01-30 No fix listed CWE-119
TI-2025-00472 CVE-2025-0568 · GHSA-qrr3-q4mc-g567

Memory corruption in Sante PACS Server

Priority MEDIUM 41

Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01049 Published 2025-01-30 No fix listed CWE-119
TI-2023-28288 CVE-2023-51637 · GHSA-6hhx-576r-4c86

SQL injection in Sante PACS Server PG

Priority MEDIUM 51

Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00965 Published 2024-05-22 No fix listed CWE-89
TI-2024-01735 CVE-2024-1863 · GHSA-2q9w-m9v5-rp2q

SQL injection in Sante PACS Server

Priority MEDIUM 45

Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01134 Published 2024-04-01 No fix listed CWE-89
TI-2022-02097 CVE-2022-2272 · GHSA-j77q-cj82-xcf6

SQL injection in Sante PACS Server

Priority MEDIUM 47

This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02842 Published 2022-08-03 No fix listed CWE-89