Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

40 records

Vendor: MedDream Clear all filters
TI-2018-15597 CVE-2018-25372 · GHSA-pjg3-5886-3fjh

MedDream PACS Server Premium 6.7.1.1 SQL Injection via email

Priority HIGH 77

MedDream PACS Server Premium 6.7.1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the email parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00305 Published 2026-05-25 No fix listed CWE-89
TI-2020-19144 CVE-2020-37009 · GHSA-hxfj-rc88-5v2p

MedDream PACS Server 6.8.3.751 - Remote Code Execution

Priority HIGH 73

MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized users to upload malicious PHP files.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00606 Published 2026-01-29 No fix listed CWE-434
TI-2025-34571 CVE-2025-54817 · GHSA-wff8-h6gc-j62q

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-33461 CVE-2025-53516 · GHSA-pp72-xvcc-65v3

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00389 Published 2026-01-20 No fix listed CWE-79
TI-2025-34292 CVE-2025-54495 · GHSA-64fm-rg2r-rmg6

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2026-01-20 No fix listed CWE-79
TI-2025-34000 CVE-2025-54157 · GHSA-9x4q-57xr-cm5h

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2026-01-20 No fix listed CWE-79
TI-2025-34534 CVE-2025-54778 · GHSA-gwq5-fv8v-mhcp

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-29022 CVE-2025-46270 · GHSA-4p2g-vp74-5w46

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2026-01-20 No fix listed CWE-79
TI-2025-34761 CVE-2025-55071 · GHSA-pcf3-3w7x-r6cg

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.004 Published 2026-01-20 No fix listed CWE-79
TI-2025-34586 CVE-2025-54852 · GHSA-w8pc-2mpf-67rc

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.004 Published 2026-01-20 No fix listed CWE-79
TI-2025-34568 CVE-2025-54814 · GHSA-mp89-xq5g-39g9

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-34595 CVE-2025-54861 · GHSA-hxpq-9xvf-f22h

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-35735 CVE-2025-57881 · GHSA-5mpf-xj2x-pq38

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-35922 CVE-2025-58080 · GHSA-83jp-f2xc-f5r2

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-33740 CVE-2025-53854 · GHSA-h849-pmqv-qcmr

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2026-01-20 No fix listed CWE-79
TI-2025-35670 CVE-2025-57787 · GHSA-g7m5-cg8g-x45r

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.004 Published 2026-01-20 No fix listed CWE-79
TI-2025-33619 CVE-2025-53707 · GHSA-rhmf-f4mc-34h7

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00389 Published 2026-01-20 No fix listed CWE-79
TI-2025-34587 CVE-2025-54853 · GHSA-cx24-hmph-49m8

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-35669 CVE-2025-57786 · GHSA-m3q4-f6w2-4mhh

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2026-01-20 No fix listed CWE-79
TI-2025-28549 CVE-2025-44000 · GHSA-pcw8-2ghj-w526

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

A reflected cross-site scripting (xss) vulnerability exists in the sendOruReport functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00389 Published 2026-01-20 No fix listed CWE-79
TI-2025-35934 CVE-2025-58095 · GHSA-p2x3-fg55-f87f

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00369 Published 2026-01-20 No fix listed CWE-79
TI-2025-35933 CVE-2025-58094 · GHSA-79fq-f269-gxf9

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35932 CVE-2025-58093 · GHSA-4hh5-gxrj-rjh8

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35931 CVE-2025-58092 · GHSA-wpc5-5qhg-m23f

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
TI-2025-35930 CVE-2025-58091 · GHSA-7v3h-xqqp-8hfq

Cross-site scripting in MedDream PACS Premium

Priority LOW 27

Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2026-01-20 No fix listed CWE-79
Load more