CVE-2025-10350

The CVE describes an SQL injection in the imageserver module of CGM NETRAAD when handling C-FIND queries, allowing an attacker connected to the PACS to access the database, including data processed by GCM CLININET. Affected software is CGM NETRAAD with the imageserver module, prior to version 7.9...