Approved changes feed: RSS · Atom

cpe:2.3:a:meddream:meddream_pacs_premium:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMeddream (2ba66fd4-3c3e-5009-9a1a-7256d616c686)
ProductMeddream Pacs Premium (5afa0fea-e276-5d1e-8a6a-724853e04c8a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58095 vulnerable 2026-06-08 07:35:17.153710 Details available
MEDIUM (6.1)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the imagedir parameter.
Published: 2026-01-20T14:49:38.006Z
Updated: 2026-01-21T16:17:35.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58094 vulnerable 2026-06-08 07:35:17.153124 Details available
MEDIUM (6.1)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the worklistsrc parameter.
Published: 2026-01-20T14:49:37.849Z
Updated: 2026-01-21T16:17:56.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58093 vulnerable 2026-06-08 07:35:17.152746 Details available
MEDIUM (6.1)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the phpdir parameter.
Published: 2026-01-20T14:49:37.678Z
Updated: 2026-01-21T16:21:23.810Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58092 vulnerable 2026-06-08 07:35:17.152385 Details available
MEDIUM (6.1)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the phpexe parameter.
Published: 2026-01-20T14:49:37.531Z
Updated: 2026-01-21T16:26:26.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58091 vulnerable 2026-06-08 07:35:17.152041 Details available
MEDIUM (6.1)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the thumbnaildir parameter.
Published: 2026-01-20T14:49:37.427Z
Updated: 2026-01-21T16:27:08.847Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58090 vulnerable 2026-06-08 07:35:17.151602 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58089 vulnerable 2026-06-08 07:35:17.151347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58088 vulnerable 2026-06-08 07:35:17.150876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58087 vulnerable 2026-06-08 07:35:17.150276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58080 vulnerable 2026-06-08 07:35:17.134324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57881 vulnerable 2026-06-08 07:33:16.303007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57787 vulnerable 2026-06-08 07:33:16.137651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57786 vulnerable 2026-06-08 07:33:16.137222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55071 vulnerable 2026-06-08 07:33:14.029225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54861 vulnerable 2026-06-08 07:33:13.494042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54853 vulnerable 2026-06-08 07:33:13.481074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54852 vulnerable 2026-06-08 07:33:13.480798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54817 vulnerable 2026-06-08 07:33:13.269388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54814 vulnerable 2026-06-08 07:33:13.265994 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54778 vulnerable 2026-06-08 07:33:13.190959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54495 vulnerable 2026-06-08 07:33:12.661548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54157 vulnerable 2026-06-08 07:33:11.660666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53912 vulnerable 2026-06-08 07:31:15.932251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53854 vulnerable 2026-06-08 07:31:15.826086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53707 vulnerable 2026-06-08 07:31:15.018902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53516 vulnerable 2026-06-08 07:31:14.653492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46270 vulnerable 2026-06-08 07:27:07.945697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44000 vulnerable 2026-06-08 07:25:10.563903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36556 vulnerable 2026-06-08 07:21:01.885831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32731 vulnerable 2026-06-08 07:19:00.701326 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27724 vulnerable 2026-06-08 07:14:55.485839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26469 vulnerable 2026-06-08 07:12:51.678312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-24485 vulnerable 2026-06-08 07:12:49.392836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.