CVE-2016-6532

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-24 · updated 2026-06-17
Weakness: CWE-798

Description

DEXIS Imaging Suite 10 has a hardcoded password for the sa account, which allows remote attackers to obtain administrative access by entering this password in a DEXIS_DATA SQL Server session.

Affected products

Dexis Imaging Suite: through 10.0

References

http://www.kb.cert.org/vuls/id/282991
http://www.securityfocus.com/bid/92823
http://www.kb.cert.org/vuls/id/282991
http://www.securityfocus.com/bid/92823

Get alerted when CVE-2016-6532 or the next vulnerability affects your stack