Vulnerabilities in MedDream

40 results
Vexday analysis

MedDream apresenta um portfólio de 40 vulnerabilidades, com 7 classificadas como críticas, predominantemente relacionadas a Cross-Site Scripting (CWE-79). Não há evidência de exploração ativa em campo (zero em KEV), indicando risco potencial contido, embora a presença de falhas críticas exija atenção prioritária. O ritmo de descobertas é moderado (apenas 1 CVE nos últimos 90 dias), sugerindo ambiente de risco estabilizado.

CVE-2025-57786MEDIUMA reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality of MedDream PACS Premium 7.3.6.870. A speciaEPSS 0.4%CVE-2025-54778MEDIUMA reflected cross-site scripting (xss) vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870. A speciallEPSS 0.4%CVE-2025-58080MEDIUMA reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. A speciallEPSS 0.4%CVE-2025-54853MEDIUMA reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870. A specially EPSS 0.4%CVE-2025-54817MEDIUMA reflected cross-site scripting (xss) vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870. A specially cEPSS 0.4%CVE-2025-54814MEDIUMA reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870. AEPSS 0.4%CVE-2025-46270MEDIUMA reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870. A speEPSS 0.3%CVE-2025-54157MEDIUMA reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A speciEPSS 0.3%CVE-2025-53854MEDIUMA reflected cross-site scripting (xss) vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium 7.3.6.870. A speciaEPSS 0.3%CVE-2025-54495MEDIUMA reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium 7.3.6.870. A speciaEPSS 0.3%CVE-2025-36556MEDIUMA reflected cross-site scripting (xss) vulnerability exists in the ldapUser functionality of MedDream PACS Premium 7.3.6.870. A specially crEPSS 0.3%CVE-2018-25372HIGHMedDream PACS Server Premium 6.7.1.1 SQL Injection via emailEPSS 0.3%CVE-2025-58091MEDIUMMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. SpecEPSS 0.3%CVE-2025-58092MEDIUMMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. SpecEPSS 0.3%CVE-2025-58090MEDIUMMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. SpecEPSS 0.3%CVE-2025-58088MEDIUMMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. SpecEPSS 0.3%CVE-2025-58093MEDIUMMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. SpecEPSS 0.3%CVE-2025-58094MEDIUMMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. SpecEPSS 0.3%CVE-2025-58089MEDIUMMultiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. SpecEPSS 0.3%CVE-2025-3480MEDIUMMedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure VulnerabilityEPSS 0.2%