Advisories · Technology

Santesoft Sante PACS Server.

Every CVE that names Santesoft Sante PACS Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-54759 CVE record

CVSS 5.1 Medium

Santesoft Sante PACS Server Cross-site Scripting
- Santesoft Sante PACS Server
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2025
CVE-2025-54862 CVE record

CVSS 4.8 Medium

Santesoft Sante PACS Server Cross-site Scripting
- Santesoft Sante PACS Server
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2025
CVE-2025-54156 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Santesoft Sante PACS Server Cleartext Transmission of Sensitive Information
- Santesoft Sante PACS Server
- Weak cryptography or TLS
Not analysed yet 18 Aug 2025
CVE-2025-53948 CVE record

CVSS 8.7 High

Santesoft Sante PACS Server Double Free
- Santesoft Sante PACS Server
- Memory corruption
Not analysed yet 18 Aug 2025
CVE-2025-2284 CVE record

CVSS 7.5 High

Santesoft Sante PACS Server Access of Uninitialized Pointer DoS
- Santesoft Sante PACS Server
- Memory corruption
Not analysed yet 13 Mar 2025
CVE-2025-2265 CVE record

CVSS 7.8 High

Santesoft Sante PACS Server HTTP.db SHA1 Hash Truncation
- Santesoft Sante PACS Server
- Weak cryptography or TLS
Not analysed yet 13 Mar 2025
CVE-2025-2264 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Santesoft Sante PACS Server Path Traversal Information Disclosure
- Santesoft Sante PACS Server
- Path traversal
Not analysed yet 13 Mar 2025
CVE-2025-2263 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Santesoft Sante PACS Server Stack-based Buffer Overflow
- Santesoft Sante PACS Server
- Memory corruption
Not analysed yet 13 Mar 2025