Vulnerabilities

TI-2025-34520 CVE-2025-54759 · GHSA-fh82-gm3r-mc3q

Santesoft Sante PACS Server Cross-site Scripting

LOW 23

Sante PACS Server is vulnerable to stored cross-site scripting.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00212 Published 2025-08-18 Fixed in 4.2.3 CWE-79

TI-2025-34596 CVE-2025-54862 · GHSA-cxx7-9848-h23g

LOW 21

Sante PACS Server web portal is vulnerable to stored cross-site scripting.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00194 Published 2025-08-18 Fixed in 4.2.3 CWE-79

TI-2025-33999 CVE-2025-54156 · GHSA-vvgm-59fr-gpvh

MEDIUM 41

The Sante PACS Server Web Portal sends credential information without encryption.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00218 Published 2025-08-18 Fixed in 4.2.3 CWE-319

TI-2025-33813 CVE-2025-53948 · GHSA-m793-qp5h-r3xw

MEDIUM 45

The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00811 Published 2025-08-18 Fixed in 4.2.3 CWE-415