CVE-2025-2284: high-severity vulnerability in Santesoft Sante PACS Server
Santesoft Sante PACS Server Access of Uninitialized Pointer DoS
Published · Updated
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 6.2%
exploitation probability
6.2%top 7% of all CVEs
observed exploitation
nono source reports it
A denial-of-service vulnerability exists in the "GetWebLoginCredentials" function in "Sante PACS Server.exe".
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Santesoft · Sante PACS ServerRelated CVEs — Santesoft Sante PACS Server
In the same product, most dangerous first.
CVE-2025-2264HIGHSantesoft Sante PACS Server Path Traversal Information DisclosureEPSS 35.4%CVE-2025-2263CRITICALSantesoft Sante PACS Server Stack-based Buffer OverflowEPSS 0.9%CVE-2025-53948HIGHSantesoft Sante PACS Server Double FreeEPSS 0.8%CVE-2025-54156CRITICALSantesoft Sante PACS Server Cleartext Transmission of Sensitive InformationEPSS 0.2%CVE-2025-54759MEDIUMSantesoft Sante PACS Server Cross-site ScriptingEPSS 0.2%CVE-2025-54862MEDIUMSantesoft Sante PACS Server Cross-site ScriptingEPSS 0.2%