CVE-2025-54759
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-08-18
Last updated on: 2025-10-17
Assigner: ICS-CERT
Description
Description
Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| santesoft | sante_pacs_server | to 4.2.3 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a stored cross-site scripting (XSS) issue in the Sante PACS Server. An attacker can inject malicious HTML code that gets stored on the server and later executed in the browser of users who access the affected content. This can lead to redirecting users to malicious websites and stealing their cookies.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing attackers to redirect you to malicious websites and steal your cookies, which may lead to unauthorized access to your account or sensitive information.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70