CVE-2025-27720CWE-319

Pixmeo OsiriX MD Cleartext Transmission of Sensitive Information

Critical · published May 8, 2025

CVSS v4.0
9.3
EPSS
0%
Percentile
21.5
In the wild
Unconfirmed
What it is

The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00299 · 21.5th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2025-05-08T22:43Z
EPSS history
Timeline
  • 08 MAY 22:43Z
    Pixmeo OsiriX MD Cleartext Transmission of Sensitive Information
    cvelistv5