What’s Vulnerable › Products
Sante PACS Server vulnerabilities
19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.
Check whether your Sante PACS Server version is affected
Latest Sante PACS Server vulnerabilities
- CVE-2025-14501 — Sante PACS Server HTTP Content-Length Header Handling NULL Pointer Dereference Denial-of-Service Vulnerability (CVSS 7.5)
- CVE-2025-54862 — Santesoft Sante PACS Server Cross-site Scripting (CVSS 5.4)
- CVE-2025-54759 — Santesoft Sante PACS Server Cross-site Scripting (CVSS 6.1)
- CVE-2025-54156 — Santesoft Sante PACS Server Cleartext Transmission of Sensitive Information (CVSS 7.5)
- CVE-2025-53948 — Santesoft Sante PACS Server Double Free (CVSS 7.5)
- CVE-2025-2284 — Santesoft Sante PACS Server Access of Uninitialized Pointer DoS (CVSS 7.5)
- CVE-2025-2265 — Santesoft Sante PACS Server HTTP.db SHA1 Hash Truncation (CVSS 7.8)
- CVE-2025-2264 — Santesoft Sante PACS Server Path Traversal Information Disclosure (CVSS 7.5)
- CVE-2025-2263 — Santesoft Sante PACS Server Stack-based Buffer Overflow (CVSS 9.8)
- CVE-2025-0574 — Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability (CVSS 7.5)
- CVE-2025-0573 — Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability (CVSS 5.3)
- CVE-2025-0572 — Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability (CVSS 4.3)
- CVE-2025-0571 — Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability (CVSS 6.5)
- CVE-2025-0570 — Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability (CVSS 6.5)
- CVE-2025-0569 — Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability (CVSS 7.5)
- CVE-2025-0568 — Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability (CVSS 7.5)
- CVE-2023-51637 — Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability (CVSS 9.8)
- CVE-2024-1863 — Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability (CVSS 9.8)
- CVE-2022-2272 — (CVSS 9.8)