Santesoft: >> Sante Pacs Server >> 4.0.10 Security Vulnerabilities
The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition. The application would require a manual restart and no authentication is required.
CVSS Score
7.5
EPSS Score
0.007
Published
2025-08-18
The Sante PACS Server Web Portal sends credential information without encryption.
CVSS Score
7.4
EPSS Score
0.0
Published
2025-08-18
Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.
CVSS Score
6.1
EPSS Score
0.0
Published
2025-08-18
Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.
CVSS Score
5.4
EPSS Score
0.0
Published
2025-08-18