medDream PACS Server 7.3.5.860 Premium Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:meddream:pacs_server:7.3.5.860:*:*:*:premium:*:*:*
part: a version: 7.3.5.860 update: *
| Vendor | Meddream (2ba66fd4-3c3e-5009-9a1a-7256d616c686) |
|---|---|
| Product | Pacs Server (09259e0d-cb2f-5f2c-b1c4-2ac5c7b164f4) |
| Edition | * |
| Language | * |
| Software edition | premium |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-32731 |
vulnerable | 2026-06-08 07:19:00.702091 |
Details available
MEDIUM (6.1)
A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7.3.5.860. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
Published: 2025-07-28T13:36:18.137Z
Updated: 2025-11-03T19:53:37.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-24485 |
vulnerable | 2026-06-08 07:12:49.393718 |
Details available
MEDIUM (5.8)
A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted HTTP request can lead to SSRF. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.
Published: 2025-07-28T13:36:15.487Z
Updated: 2025-11-03T19:44:47.144Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.