Vendor CVEs

MedDream

All CVEs

40 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-3484	MedDream Pacs Server	Cri	0.64	9.8	0.01	May 22, 2025	MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this…
CVE-2025-53912	MedDream PACS Premium	Cri	0.62	9.6	0.00	Jan 20, 2026	An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send http request to trigger this vulnerability.
CVE-2025-27724	MedDream PACS Premium	Cri	0.60	9.3	0.01	Jul 28, 2025	A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability.
CVE-2025-26469	MedDream PACS Premium	Cri	0.60	9.3	0.01	Jul 28, 2025	An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840. A specially crafted application can decrypt credentials stored in a configuration-related registry key. An attacker can execute a…
CVE-2020-37009	MedDream Pacs Server	Hig	0.57	8.8	0.01	Jan 29, 2026	MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized users to upload malicious PHP files. Attackers can exploit the uploadImage.php endpoint by authenticating and uploading a PHP shell to execute arbitrary system…
CVE-2018-25372	MedDream PACS Premium	Hig	0.53	8.2	0.00	May 25, 2026	MedDream PACS Server Premium 6.7.1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the email parameter. Attackers can submit crafted POST requests to the userSignup.php endpoint…
CVE-2025-3483	MedDream Pacs Server	Hig	0.51	7.8	0.01	May 22, 2025	MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this…
CVE-2025-3482	MedDream Pacs Server	Hig	0.51	7.8	0.01	May 22, 2025	MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this…
CVE-2025-3481	MedDream Pacs Server	Hig	0.51	7.8	0.01	May 22, 2025	MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this…
CVE-2025-3480	MedDream WEB DICOM Viewer	Med	0.42	6.5	0.00	May 22, 2025	MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of MedDream WEB DICOM Viewer. Authentication is not required to…
CVE-2025-58095	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58094	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58093	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58092	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58091	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58090	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58089	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58088	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58087	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58080	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-57881	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-57787	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-57786	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-55071	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54861	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54853	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-54852	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54817	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a URL to a malicious website to trigger this…
CVE-2025-54814	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54778	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54495	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54157	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-53854	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-53707	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-53516	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-46270	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-44000	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the sendOruReport functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-36556	MedDream PACS Premium	Med	0.40	6.1	0.00	Jan 20, 2026	A reflected cross-site scripting (xss) vulnerability exists in the ldapUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-32731	MedDream PACS Premium	Med	0.40	6.1	0.01	Jul 28, 2025	A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7.3.5.860. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to…
CVE-2025-24485	MedDream PACS Premium	Med	0.38	5.8	0.06	Jul 28, 2025	A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted HTTP request can lead to SSRF. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

CVE-2025-3484CriMay 22, 2025
MedDream
Pacs Server
risk 0.64cvss 9.8epss 0.01
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this…
CVE-2025-53912CriJan 20, 2026
MedDream
PACS Premium
risk 0.62cvss 9.6epss 0.00
An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send http request to trigger this vulnerability.
CVE-2025-27724CriJul 28, 2025
MedDream
PACS Premium
risk 0.60cvss 9.3epss 0.01
A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability.
CVE-2025-26469CriJul 28, 2025
MedDream
PACS Premium
risk 0.60cvss 9.3epss 0.01
An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840. A specially crafted application can decrypt credentials stored in a configuration-related registry key. An attacker can execute a…
CVE-2020-37009HigJan 29, 2026
MedDream
Pacs Server
risk 0.57cvss 8.8epss 0.01
MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized users to upload malicious PHP files. Attackers can exploit the uploadImage.php endpoint by authenticating and uploading a PHP shell to execute arbitrary system…
CVE-2018-25372HigMay 25, 2026
MedDream
PACS Premium
risk 0.53cvss 8.2epss 0.00
MedDream PACS Server Premium 6.7.1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the email parameter. Attackers can submit crafted POST requests to the userSignup.php endpoint…
CVE-2025-3483HigMay 22, 2025
MedDream
Pacs Server
risk 0.51cvss 7.8epss 0.01
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this…
CVE-2025-3482HigMay 22, 2025
MedDream
Pacs Server
risk 0.51cvss 7.8epss 0.01
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this…
CVE-2025-3481HigMay 22, 2025
MedDream
Pacs Server
risk 0.51cvss 7.8epss 0.01
MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MedDream PACS Server. Authentication is not required to exploit this…
CVE-2025-3480MedMay 22, 2025
MedDream
WEB DICOM Viewer
risk 0.42cvss 6.5epss 0.00
MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of MedDream WEB DICOM Viewer. Authentication is not required to…
CVE-2025-58095MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58094MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58093MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58092MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58091MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58090MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58089MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58088MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58087MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger these…
CVE-2025-58080MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-57881MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-57787MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-57786MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-55071MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54861MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54853MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-54852MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54817MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a URL to a malicious website to trigger this…
CVE-2025-54814MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54778MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54495MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-54157MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-53854MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-53707MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-53516MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-46270MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-44000MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the sendOruReport functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this…
CVE-2025-36556MedJan 20, 2026
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.00
A reflected cross-site scripting (xss) vulnerability exists in the ldapUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerability.
CVE-2025-32731MedJul 28, 2025
MedDream
PACS Premium
risk 0.40cvss 6.1epss 0.01
A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7.3.5.860. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to…
CVE-2025-24485MedJul 28, 2025
MedDream
PACS Premium
risk 0.38cvss 5.8epss 0.06
A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A specially crafted HTTP request can lead to SSRF. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.