Santesoft Sante PACS Server 4.1.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:santesoft:sante_pacs_server:4.1.0:*:*:*:*:*:*:*

part: a version: 4.1.0 update: *

VendorSantesoft (fb240e4d-09a4-5ee7-a61b-3608b917a506)
ProductSante Pacs Server (a44062ce-92be-5f35-9836-4059af8574a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2264 vulnerable 2026-06-08 07:16:56.592907 Santesoft Sante PACS Server Path Traversal Information Disclosure
HIGH (7.5)
A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed.
Published: 2025-03-13T16:29:07.468Z
Updated: 2025-03-14T13:41:13.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2263 vulnerable 2026-06-08 07:16:56.592268 Santesoft Sante PACS Server Stack-based Buffer Overflow
CRITICAL (9.8)
During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or password is supplied by an unauthenticated remote attacker.
Published: 2025-03-13T16:25:59.356Z
Updated: 2025-03-14T13:41:49.600Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.