CVE-2025-2264CWE-22

Santesoft Sante PACS Server Path Traversal Information Disclosure

High · published March 13, 2025

CVSS v3.1
7.5
EPSS
35%
Percentile
98.4
In the wild
Unconfirmed
What it is

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.35383 · 98.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-03-13T16:29Z
EPSS history
Timeline
  • 13 MAR 16:29Z
    Santesoft Sante PACS Server Path Traversal Information Disclosure
    cvelistv5