CVE-2025-54759: Santesoft Sante PACS Server Cross-site Scripting

Q: What is the severity of CVE-2025-54759?

The severity of CVE-2025-54759 is considered high due to the potential for an attacker to execute stored cross-site scripting attacks.

Q: How do I fix CVE-2025-54759?

To fix CVE-2025-54759, ensure that Sante PACS Server is updated to the latest version that addresses the stored cross-site scripting vulnerability.

Q: What impact can CVE-2025-54759 have on users?

CVE-2025-54759 can lead to unauthorized access to user cookies, potentially allowing attackers to impersonate users or steal sensitive data.

Q: Which software is affected by CVE-2025-54759?

CVE-2025-54759 specifically affects Santesoft Sante PACS Server.

Q: Is there a workaround for CVE-2025-54759?

Currently, there are no documented workarounds for CVE-2025-54759 other than applying the recommended updates.

Published Aug 18, 2025

Updated

Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie.

Affected Software

2 affected components

Santesoft Sante PACS Server

Santesoft Sante PACS Server<4.2.3

Remediation

Information

Santesoft recommends users update PACS Server to Version 4.2.3 or later https://santesoft.com/win/sante-pacs-server/download.html .

Event History

Aug 18, 2025

CVE Published

via MITRE·09:26 PM

Data Sourced

via MITRE·09:26 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-54759?

The severity of CVE-2025-54759 is considered high due to the potential for an attacker to execute stored cross-site scripting attacks.

How do I fix CVE-2025-54759?

To fix CVE-2025-54759, ensure that Sante PACS Server is updated to the latest version that addresses the stored cross-site scripting vulnerability.

What impact can CVE-2025-54759 have on users?