Approved changes feed: RSS · Atom

cpe:2.3:a:santesoft:sante_pacs_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSantesoft (fb240e4d-09a4-5ee7-a61b-3608b917a506)
ProductSante Pacs Server (a44062ce-92be-5f35-9836-4059af8574a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-54862 vulnerable 2026-06-08 07:33:13.494400 Santesoft Sante PACS Server Cross-site Scripting
MEDIUM (5.4)
Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.
Published: 2025-08-18T21:23:42.930Z
Updated: 2025-08-19T19:22:39.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54759 vulnerable 2026-06-08 07:33:13.170022 Santesoft Sante PACS Server Cross-site Scripting
MEDIUM (6.1)
Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.
Published: 2025-08-18T21:26:10.126Z
Updated: 2025-08-19T19:22:23.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54156 vulnerable 2026-06-08 07:33:11.659563 Santesoft Sante PACS Server Cleartext Transmission of Sensitive Information
HIGH (7.4)
The Sante PACS Server Web Portal sends credential information without encryption.
Published: 2025-08-18T21:21:38.589Z
Updated: 2025-08-19T19:23:01.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53948 vulnerable 2026-06-08 07:31:15.981773 Santesoft Sante PACS Server Double Free
HIGH (7.5)
The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition. The application would require a manual restart and no authentication is required.
Published: 2025-08-18T21:16:03.614Z
Updated: 2025-08-19T19:24:23.617Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2284 vulnerable 2026-06-08 07:16:56.726309 Santesoft Sante PACS Server Access of Uninitialized Pointer DoS
HIGH (7.5)
A denial-of-service vulnerability exists in the "GetWebLoginCredentials" function in "Sante PACS Server.exe".
Published: 2025-03-13T16:35:45.891Z
Updated: 2025-03-17T13:55:32.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2265 vulnerable 2026-06-08 07:16:56.593271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2264 vulnerable 2026-06-08 07:16:56.592764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2263 vulnerable 2026-06-08 07:16:56.591215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0574 vulnerable 2026-06-08 07:02:24.875094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0573 vulnerable 2026-06-08 07:02:24.874611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0572 vulnerable 2026-06-08 07:02:24.874338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0571 vulnerable 2026-06-08 07:02:24.873934 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0570 vulnerable 2026-06-08 07:02:24.873551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0569 vulnerable 2026-06-08 07:02:24.873020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0568 vulnerable 2026-06-08 07:02:24.872642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1863 vulnerable 2026-06-08 06:27:14.746330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51637 vulnerable 2026-06-08 06:17:53.657066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.