CVE-2024-7872CWE-201
Sensetive Data Exposure in ExtremePACS' Extreme XDS
High · published March 6, 2025
What it is
Insertion of Sensitive Information Into Sent Data vulnerability in ExtremePACS Extreme XDS allows Retrieve Embedded Sensitive Data.
This issue affects Extreme XDS: before 3933.
The record
Technical detail
- CVSS v3.1
- 7.6 · HIGH
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
- CVSS v4.0
- Not supplied
- EPSS
- 0.00251 · 15.5th percentile
- Weakness
- CWE-201 · Insertion of Sensitive Information Into Sent Data
- Published
- 2025-03-06T11:14Z
EPSS history
Timeline