CVE-2025-0896

CVE-2025-0896 affects Orthanc server prior to version 1.5.8. The root cause is that basic authentication is not enabled by default when remote access is enabled, which can lead to unauthorized access. CVSS metrics shown in the public data indicate CRITICAL impact across confidentiality, integrity...

CVE-2025-0896 Orthanc Server Missing Authentication for Critical Function

Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker...

CVE-2025-0896 Orthanc Server Missing Authentication for Critical Function

Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker...

CVE-2025-0896

Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker...

Orthanc 访问控制错误漏洞

Orthanc is a free and open source software from Orthanc. An access control error vulnerability exists in Orthanc versions prior to 1.5.8 that stems from not enabling basic authentication by default when enabling remote access...

[SECURITY] [DLA 4038-2] dcmtk regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4038-2 [email protected] https://www.debian.org/lts/security/ Adrian Bunk February 12, 2025 https://wiki.debian.org/LTS -...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on February 6, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-037-01 Schneider Electric EcoStruxure Power Monitoring Expert PME ICSA-25-037-02...

PT-2025-5866 · Unknown · Orthanc Dicom Server

Name of the Vulnerable Software and Affected Versions: Orthanc DICOM Server versions prior to 1.5.8 Description: The issue allows unauthorized access to medical images due to missing authentication. This exposes medical data to potential unauthorized access. Remote attackers can exploit this to...

PT-2026-20548

Name of the Vulnerable Software and Affected Versions Orthanc versions prior to 1.12.10 Description An authorisation logic flaw exists in the HTTP Basic Authentication implementation of Orthanc. Successful exploitation could lead to privilege escalation, potentially granting full administrative...

OPENSUSE-SU-2024:12383-1 orthanc-1.11.2-1.1 on GA media

These are all security issues fixed in the orthanc-1.11.2-1.1 package on the GA media of openSUSE Tumbleweed...

Cross Site Scripting (XSS)

Orthanc is vulnerable to Cross Site Scripting XSS. The vulnerability is caused due to a missing sanitization in the server's error reporting. This can lead to compromising Confidentiality and Integrity of the system...

CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

DEBIAN-CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

UBUNTU-CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

Cross site scripting

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...

PT-2024-19545 · Orthanc +1 · Orthanc +1

Name of the Vulnerable Software and Affected Versions: Orthanc versions prior to 1.12.2 Description: The issue is a reflected cross-site scripting XSS vulnerability. It was present in the server's error reporting. Recommendations: For Orthanc versions prior to 1.12.2, update to version 1.12.2 or...

Orthanc Security Breach

Orthanc is a free and open source software from Orthanc. A security vulnerability exists in versions of Orthanc prior to 1.12.2 that stems from vulnerability to reflective cross-site scripting XSS attacks...

CVE-2024-22725

Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting XSS vulnerability. The vulnerability was present in the server's error reporting...