CVE-2025-54862
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-08-18
Last updated on: 2025-10-17
Assigner: ICS-CERT
Description
Description
Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| santesoft | sante_pacs_server | to 4.2.3 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a stored cross-site scripting (XSS) issue in the Sante PACS Server web portal. It allows an attacker to inject malicious HTML code that can redirect users to malicious websites and steal their cookies.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing attackers to hijack user sessions through stolen cookies, potentially leading to unauthorized access to user accounts or sensitive information. It can also redirect users to malicious websites, increasing the risk of further attacks or malware infections.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70