Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

MedDream vulnerabilities

40 published CVEs name MedDream among the affected products.

All 40 in the listAtom feed of new CVEs
Published CVEs
40
Last 12 months
31
Critical
7
Known exploited
0

Critical 7High 2Medium 31Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20259
  2. 202631

Newest CVEs

  • CVE-2018-25372

    MedDream PACS Server Premium 6.7.1.1 SQL Injection via email

    MedDream · PACS Server Premium

    High8.8
  • CVE-2020-37009

    MedDream PACS Server 6.8.3.751 - Remote Code Execution

    MedDream · MedDream PACS Server

    High8.7
  • CVE-2025-54817

    A reflected cross-site scripting (xss) vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious…

    MedDream · MedDream PACS Premium

    Medium6.1
  • CVE-2025-53516

    A reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious…

    MedDream · MedDream PACS Premium

    Medium6.1
  • CVE-2025-54495

    A reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium 7.3.6.870. A specially crafted…

    MedDream · MedDream PACS Premium

    Medium6.1
  • CVE-2025-54157

    A reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted…

    MedDream · MedDream PACS Premium

    Medium6.1
  • CVE-2025-54778

    A reflected cross-site scripting (xss) vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870. A specially crafted malicious…

    MedDream · MedDream PACS Premium

    Medium6.1
  • CVE-2025-46270

    A reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870. A specially crafted…

    MedDream · MedDream PACS Premium

    Medium6.1
  • CVE-2025-55071

    A reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870. A specially crafted…

    MedDream · MedDream PACS Premium

    Medium6.1
  • CVE-2025-54852

    A reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870. A specially crafted…

    MedDream · MedDream PACS Premium

    Medium6.1

Products with the most CVEs

  1. MedDream PACS Premium33
  2. PACS Server4
  3. MedDream PACS Server1
  4. PACS Server Premium1
  5. WEB DICOM Viewer1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)29
  2. CWE-121 Stack-based buffer overflow4
  3. CWE-284 Improper access control1
  4. CWE-319 Cleartext transmission of sensitive information1
  5. CWE-434 Unrestricted file upload1
  6. CWE-522 1
  7. CWE-73 External control of file name or path1
  8. CWE-732 1
  9. CWE-89 SQL injection1
  10. CWE-918 Server-side request forgery (SSRF)1