Skip to content
OpenAdvisories
High ICSMA-25-224-01 5 CVEs

Santesoft Sante PACS Server

Published Aug 12, 2025 · Updated Aug 12, 2025

Vendor: Santesoft Product: Sante PACS Server

Summary

Successful exploitation of these vulnerabilities could allow an attacker to create arbitrary files, cause a denial-of-service condition, obtain sensitive information, and steal a user's cookie information.

Vulnerabilities 5

  • High 7.5
    CVE-2025-53948

    Santesoft Sante PACS Server Double Free

    The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition. The application would require a manual restart and no authentication is required.

    Santesoft Sante PACS Server
  • High 7.4
    CVE-2025-54156

    Santesoft Sante PACS Server Cleartext Transmission of Sensitive Information

    The Sante PACS Server Web Portal sends credential information without encryption.

    Santesoft Sante PACS Server
  • Medium 6.1
    CVE-2025-54759

    Santesoft Sante PACS Server Cross-site Scripting

    Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.

    Santesoft Sante PACS Server
  • Medium 5.4
    CVE-2025-54862

    Santesoft Sante PACS Server Cross-site Scripting

    Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.

    Santesoft Sante PACS Server
  • Medium 4.3
    CVE-2025-0572

    Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability

    Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is required to exploit th…

    Sante PACS Server

Revision history

  1. #1

    Initial Publication

References