Vulnerability Database

309,083

Total vulnerabilities in the database

CVE-2025-2264

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed.

  • Published: Mar 13, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-2264
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
santesoft / sante_pacs_server 4.1.0 4.1.0.x