Vulnerabilidades em Orthanc
13 resultadosAnálise Vexday
Orthanc apresenta 13 vulnerabilidades catalogadas, com 4 classificadas como críticas, porém nenhuma sob exploração ativa conhecida no momento. A fraqueza dominante é injeção de scripts (CWE-79), indicando deficiências em validação de entrada; o ritmo recente de descobertas (2 CVEs nos últimos 90 dias) sugere exposição contínua a novos riscos que merecem monitoramento, especialmente considerando a presença de falhas críticas.
CVE-2025-0896CRITICALOrthanc Server Missing Authentication for Critical FunctionEPSS 2.4%CVE-2026-5445CRITICALOut-of-Bounds Read in DicomImageDecoder (DecodeLookupTable)EPSS 0.7%CVE-2026-5437HIGHOut-of-Bounds Read in DicomStreamReaderEPSS 0.6%CVE-2026-5442CRITICALHeap Buffer Overflow in DICOM Image Decoder via VR UL DimensionsEPSS 0.6%CVE-2026-5443CRITICALHeap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)EPSS 0.6%CVE-2026-5440HIGHMemory Exhaustion via Unbounded Content-LengthEPSS 0.6%CVE-2026-5438HIGHGzip Decompression Bomb via Content-Encoding HeaderEPSS 0.5%CVE-2026-5439HIGHMemory Exhaustion via Forged ZIP MetadataEPSS 0.4%CVE-2023-7238HIGHImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Orthanc Osimis DICOM Web ViewerEPSS 0.3%CVE-2026-10173MEDIUMOrthanc Explorer 2 URL StudyList.vue cross site scriptingEPSS 0.3%CVE-2026-5444HIGHHeap Buffer Overflow in PAM Image Buffer AllocationEPSS 0.2%CVE-2026-5441HIGHOut-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression)EPSS 0.1%CVE-2026-10528MEDIUMOrthanc DICOM Server DCMTK FromDcmtkBridge.cpp read stack-based overflowEPSS 0.1%