CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,260 CVEs published, 235 critical, and 3 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,260
Show in the list
Critical, last 7 days
235
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product santesoft:sante_pacs_server. Show all products

Free: a daily email for up to 3 products and the weekly digest. No card, no password. By continuing you agree to the Terms and Privacy Policy.

16 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2022-2272
Healthcare
Critical 9.8This vulnerability allows remote attackers to bypass authentication on affected installations of Sante PACS Server 3.0.4.
Assigned by zdi
Aug 3, 2022
CVE-2024-1863
Healthcare
Critical 9.8Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability
Assigned by zdi
Apr 1, 2024
CVE-2023-51637
Healthcare
Critical 9.8Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability
Assigned by zdi
May 22, 2024
CVE-2025-0568
Healthcare
High 7.5Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability
Assigned by zdi
Jan 30, 2025
CVE-2025-0570
Healthcare
Medium 6.5Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability
Assigned by zdi
Jan 30, 2025
CVE-2025-0571
Healthcare
Medium 6.5Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability
Assigned by zdi
Jan 30, 2025
CVE-2025-0569
Healthcare
High 7.5Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability
Assigned by zdi
Jan 30, 2025
CVE-2025-0573
Healthcare
Medium 5.3Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability
Assigned by zdi
Jan 30, 2025
CVE-2025-0572
Healthcare
Medium 4.3Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability
Assigned by zdi
Jan 30, 2025
CVE-2025-0574
Healthcare
High 8.2Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability
Assigned by zdi
Jan 30, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Essential cookies only, unless you allow a Google ads cookie. See our .