VULNERABILITY INTELLIGENCE

CVE-2025-2264

CVSS score7.5 HIGH
EPSS probability35.38%
CISA KEVNot currently listed
Published2025-03-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed.

Weakness classification

  • vulnreport@tenable.com: CWE-22
  • nvd@nist.gov: CWE-22

Primary references