Meddream
Meddream Pacs Server: vulnerabilidades y CVE
Meddream Pacs Server tiene 42 vulnerabilidades publicadas, 31 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE42
Últimos 12 meses31
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2020-37009 | Alta (8.7) | 0.59% | — | 29 ene 2026 | MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized users to upload malicious PHP files. Attackers can exploit the uploadImage.php endpoint by… |
| CVE-2025-58095 | Media (6.1) | 0.36% | — | 20 ene 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution.… |
| CVE-2025-58094 | Media (6.1) | 0.27% | — | 20 ene 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution.… |
| CVE-2025-58093 | Media (6.1) | 0.27% | — | 20 ene 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution.… |
| CVE-2025-58092 | Media (6.1) | 0.27% | — | 20 ene 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution.… |
| CVE-2025-58091 | Media (6.1) | 0.27% | — | 20 ene 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution.… |
| CVE-2025-58090 | Media (6.1) | 0.27% | — | 20 ene 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution.… |
| CVE-2025-58089 | Media (6.1) | 0.27% | — | 20 ene 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution.… |
| CVE-2025-58088 | Media (6.1) | 0.27% | — | 20 ene 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution.… |
| CVE-2025-58087 | Media (6.1) | 0.36% | — | 20 ene 2026 | Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. Specially crafted malicious URLs can lead to arbitrary javascript code execution.… |
| CVE-2025-58080 | Media (5.4) | 0.35% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-57881 | Media (5.4) | 0.35% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-57787 | Media (6.1) | 0.39% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-57786 | Media (5.4) | 0.35% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-55071 | Media (6.1) | 0.39% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-54861 | Media (5.4) | 0.35% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-54853 | Media (5.4) | 0.35% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-54852 | Media (6.1) | 0.39% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-54817 | Media (5.4) | 0.35% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An… |
| CVE-2025-54814 | Media (5.4) | 0.35% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code… |
| CVE-2025-54778 | Media (5.4) | 0.35% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-54495 | Media (5.4) | 0.34% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An… |
| CVE-2025-54157 | Media (5.4) | 0.34% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-53912 | Alta (8.1) | 0.63% | — | 20 ene 2026 | An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send http request… |
| CVE-2025-53854 | Media (5.4) | 0.34% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-53707 | Media (6.1) | 0.38% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-53516 | Media (6.1) | 0.38% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious url can lead to arbitrary javascript code execution. An… |
| CVE-2025-46270 | Media (5.4) | 0.34% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution.… |
| CVE-2025-44000 | Media (6.1) | 0.38% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the sendOruReport functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
| CVE-2025-36556 | Media (5.4) | 0.34% | — | 20 ene 2026 | A reflected cross-site scripting (xss) vulnerability exists in the ldapUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious URL can lead to arbitrary javascript code execution. An… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.