High · 7.4 CVE-2025-27720 EUVD-2025-14074GHSA-j5r6-pp4x-vxpq

Pixmeo OsiriX MD Cleartext Transmission of Sensitive Information

Published May 8, 2025 · Updated May 9, 2025 · Assigned by icscert

Description

The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials.

Vendor	Product	Affected	Fixed
Pixmeo	OsiriX MD	≤ 14.0.1 (Build 2024-02-28)	—