Approved changes feed: RSS · Atom

cpe:2.3:a:meddream:pacs_server:7.3.6.870:*:*:*:premium:*:*:*

part: a version: 7.3.6.870 update: *

VendorMeddream (2ba66fd4-3c3e-5009-9a1a-7256d616c686)
ProductPacs Server (09259e0d-cb2f-5f2c-b1c4-2ac5c7b164f4)
Edition*
Language*
Software editionpremium
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58095 vulnerable 2026-06-08 07:35:17.153748 Details available
MEDIUM (6.1)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the imagedir parameter.
Published: 2026-01-20T14:49:38.006Z
Updated: 2026-01-21T16:17:35.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58094 vulnerable 2026-06-08 07:35:17.153283 Details available
MEDIUM (6.1)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the worklistsrc parameter.
Published: 2026-01-20T14:49:37.849Z
Updated: 2026-01-21T16:17:56.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58093 vulnerable 2026-06-08 07:35:17.152901 Details available
MEDIUM (6.1)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the phpdir parameter.
Published: 2026-01-20T14:49:37.678Z
Updated: 2026-01-21T16:21:23.810Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58092 vulnerable 2026-06-08 07:35:17.152423 Details available
MEDIUM (6.1)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the phpexe parameter.
Published: 2026-01-20T14:49:37.531Z
Updated: 2026-01-21T16:26:26.765Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58091 vulnerable 2026-06-08 07:35:17.152079 Details available
MEDIUM (6.1)
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these vulnerabilities.This vulnerability affects the thumbnaildir parameter.
Published: 2026-01-20T14:49:37.427Z
Updated: 2026-01-21T16:27:08.847Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58090 vulnerable 2026-06-08 07:35:17.151753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58089 vulnerable 2026-06-08 07:35:17.151387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58088 vulnerable 2026-06-08 07:35:17.150913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58087 vulnerable 2026-06-08 07:35:17.150411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58080 vulnerable 2026-06-08 07:35:17.145425 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57881 vulnerable 2026-06-08 07:33:16.303159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57787 vulnerable 2026-06-08 07:33:16.137795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57786 vulnerable 2026-06-08 07:33:16.137399 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55071 vulnerable 2026-06-08 07:33:14.029368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54861 vulnerable 2026-06-08 07:33:13.494075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54853 vulnerable 2026-06-08 07:33:13.481225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54852 vulnerable 2026-06-08 07:33:13.480839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54817 vulnerable 2026-06-08 07:33:13.269540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54814 vulnerable 2026-06-08 07:33:13.266033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54778 vulnerable 2026-06-08 07:33:13.191001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54495 vulnerable 2026-06-08 07:33:12.661719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54157 vulnerable 2026-06-08 07:33:11.661763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53912 vulnerable 2026-06-08 07:31:15.932301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53854 vulnerable 2026-06-08 07:31:15.826135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53707 vulnerable 2026-06-08 07:31:15.018935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53516 vulnerable 2026-06-08 07:31:14.654604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46270 vulnerable 2026-06-08 07:27:07.946999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44000 vulnerable 2026-06-08 07:25:10.564797 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36556 vulnerable 2026-06-08 07:21:01.886788 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.