Skip to content
OpenAdvisories
High ICSMA-25-301-01 2 CVEs

Vertikal Systems Hospital Manager Backend Services

Published Oct 28, 2025 · Updated Oct 28, 2025

Vendor: Vertikal Systems Product: Hospital Manager Backend Services

Summary

Successful exploitation of these vulnerabilities could allow an attacker to obtain unauthorized access to and disclose sensitive information.

Vulnerabilities 2

  • High 7.5
    CVE-2025-54459

    Vertikal Systems Hospital Manager Backend Services Exposure of Sensitive System Information to an Unauthorized Control Sphere

    Prior to September 19, 2025, the Hospital Manager Backend Services exposed the ASP.NET tracing endpoint /trace.axd without authentication, allowing a remote attacker to obtain live request traces and sensitive information such as request metadata, session ide…

    Vertikal Systems Hospital Manager Backend Services
  • Medium 5.3
    CVE-2025-61959

    Vertikal Systems Hospital Manager Backend Services Generation of Error Message Containing Sensitive Information

    Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd requests, disclosing framework and ASP.NET version information, stack traces, internal paths, and the insecure configuration 'c…

    Vertikal Systems Hospital Manager Backend Services

Revision history

  1. #1

    Initial Publication

References