Apryse WebViewer Cross-Site Script Vulnerability

Apryse WebViewer is a web browser from Apryse Corporation. A security vulnerability exists in Apryse WebViewer v11.1 and prior versions that originates from cross-site scripting in the rendering engine component that allows execution of arbitrary code via specially crafted PDF files...

PT-2025-9517

Name of the Vulnerable Software and Affected Versions Apryse WebViewer versions prior to 11.1 Description A Cross-Site Scripting XSS issue in the Rendering Engine component allows attackers to execute arbitrary code via a crafted PDF file. Recommendations For versions prior to 11.1, update to a...

CVE-2024-57240

A Cross-Site Scripting XSS vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execute arbitrary code via a crafted PDF file...

CVE-2024-57240: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execute arbitrary code via a crafted PDF file...

CVE-2024-57240

A Cross-Site Scripting (XSS) vulnerability exists in the Rendering Engine component of Apryse WebViewer version v11.1 and earlier . This flaw allows an attacker to execute arbitrary code by providing a specially crafted PDF file . To remediate this issue and prevent arbitrary code execution, user...

CVE-2024-4327

A vulnerability was found in Apryse WebViewer up to 10.8.0. It has been classified as problematic. This affects an unknown part of the component PDF Document Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2024-4327 Apryse WebViewer PDF Document cross site scripting

A vulnerability was found in Apryse WebViewer up to 10.8.0. It has been classified as problematic. This affects an unknown part of the component PDF Document Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2024-4327

The CVE-2024-4327 entry concerns Apryse WebViewer (up to 10.8.0). Affected component: the PDF Document Handler, where a cross-site scripting flaw has been identified. Root cause: improper handling in this component enables malicious input to execute in the context of a user session. Impact: remot...

Apryse WebViewer Cross-Site Script Vulnerability

Apryse WebViewer is a web browser from Apryse Corporation. A cross-site scripting vulnerability exists in Apryse WebViewer version 10.8.0, which stems from the component PDF Document Handler that causes cross-site scripting...

CVE-2024-4327: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Apryse WebViewer up to 10.8.0. It has been classified as problematic. This affects an unknown part of the component PDF Document Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...

PT-2024-30433 · Apryse · Apryse Webviewer

Name of the Vulnerable Software and Affected Versions: Apryse WebViewer versions up to 10.8.0 Description: A vulnerability was found in the PDF Document Handler component of Apryse WebViewer, which can lead to cross site scripting. The manipulation can be initiated remotely. The vendor recommends...

CVE-2023-7238

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser...

CVE-2023-7238

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser...

Out-of-bounds

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser...

CVE-2023-7238

The CVE-2023-7238 issue affects the Osimis WebViewer (Orthanc Osimis DICOM Web Viewer). The vulnerability is a Cross-site Scripting (XSS) flaw where an attacker can upload a malicious DICOM study and trigger JavaScript execution when a user views it in the WebViewer. Affected product component is...

CVE-2023-7238: Improper Neutralization of Input During Web Page Generation

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser...

PT-2024-15244 · Osimis · Osimis Webviewer

Name of the Vulnerable Software and Affected Versions: Osimis WebViewer affected versions not specified Description: A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer, the issue gets triggered. If exploited, the attacker wi...

Osimis WebViewer Cross-Site Scripting Vulnerability

Osimis WebViewer is an AI solution from Osimis. Osimis WebViewer suffers from a security vulnerability that originates from allowing an attacker to execute arbitrary JavaScript code in a victim's browser...

openSUSE 15 Security Update : gdcm, orthanc, orthanc-gdcm, orthanc-webviewer (openSUSE-SU-2022:10144-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10144-1 advisory. - OFFIS DCMTK's All versions prior to 3.6.7 service class provider SCP is vulnerable to path traversal, allowing an attacker to write DICO...

openSUSE 15 Security Update : gdcm, orthanc, orthanc-gdcm, orthanc-webviewer (openSUSE-SU-2022:10145-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10145-1 advisory. - OFFIS DCMTK's All versions prior to 3.6.7 service class provider SCP is vulnerable to path traversal, allowing an attacker to write DICO...