# cve.now: Meddream

The newest entries naming Meddream as an affected vendor (up to 200), of 40 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2018-25372](https://cve.now/CVE-2018-25372.md): MedDream PACS Server Premium 6.7.1.1 SQL Injection via email (CVSS 8.8)
- [CVE-2020-37009](https://cve.now/CVE-2020-37009.md): MedDream PACS Server 6.8.3.751 - Remote Code Execution (CVSS 8.7)
- [CVE-2025-54817](https://cve.now/CVE-2025-54817.md): A reflected cross-site scripting (xss) vulnerability exists in the autoPurge functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-53516](https://cve.now/CVE-2025-53516.md): A reflected cross-site scripting (xss) vulnerability exists in the downloadZip functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-54495](https://cve.now/CVE-2025-54495.md): A reflected cross-site scripting (xss) vulnerability exists in the emailfailedjob functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-54157](https://cve.now/CVE-2025-54157.md): A reflected cross-site scripting (xss) vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-54778](https://cve.now/CVE-2025-54778.md): A reflected cross-site scripting (xss) vulnerability exists in the existingUser functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-46270](https://cve.now/CVE-2025-46270.md): A reflected cross-site scripting (xss) vulnerability exists in the fetchPriorStudies functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-55071](https://cve.now/CVE-2025-55071.md): A reflected cross-site scripting (xss) vulnerability exists in the modifyAnonymize functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-54852](https://cve.now/CVE-2025-54852.md): A reflected cross-site scripting (xss) vulnerability exists in the modifyAeTitle functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-54814](https://cve.now/CVE-2025-54814.md): A reflected cross-site scripting (xss) vulnerability exists in the modifyAutopurgeFilter functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-54861](https://cve.now/CVE-2025-54861.md): A reflected cross-site scripting (xss) vulnerability exists in the modifyCoercion functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-57881](https://cve.now/CVE-2025-57881.md): A reflected cross-site scripting (xss) vulnerability exists in the modifyEmail functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-58080](https://cve.now/CVE-2025-58080.md): A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7App functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-53854](https://cve.now/CVE-2025-53854.md): A reflected cross-site scripting (xss) vulnerability exists in the modifyHL7Route functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-57787](https://cve.now/CVE-2025-57787.md): A reflected cross-site scripting (xss) vulnerability exists in the modifyRoute functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-53707](https://cve.now/CVE-2025-53707.md): A reflected cross-site scripting (xss) vulnerability exists in the modifyTranscript functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-54853](https://cve.now/CVE-2025-54853.md): A reflected cross-site scripting (xss) vulnerability exists in the modifyUser functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-57786](https://cve.now/CVE-2025-57786.md): A reflected cross-site scripting (xss) vulnerability exists in the notifynewstudy functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-44000](https://cve.now/CVE-2025-44000.md): A reflected cross-site scripting (xss) vulnerability exists in the sendOruReport functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-58095](https://cve.now/CVE-2025-58095.md): Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-58094](https://cve.now/CVE-2025-58094.md): Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-58093](https://cve.now/CVE-2025-58093.md): Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-58092](https://cve.now/CVE-2025-58092.md): Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-58091](https://cve.now/CVE-2025-58091.md): Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-58090](https://cve.now/CVE-2025-58090.md): Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-58089](https://cve.now/CVE-2025-58089.md): Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-58088](https://cve.now/CVE-2025-58088.md): Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-58087](https://cve.now/CVE-2025-58087.md): Multiple reflected cross-site scripting (xss) vulnerabilities exist in the config.php functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-36556](https://cve.now/CVE-2025-36556.md): A reflected cross-site scripting (xss) vulnerability exists in the ldapUser functionality of MedDream PACS Premium 7.3.6.870. (CVSS 6.1)
- [CVE-2025-53912](https://cve.now/CVE-2025-53912.md): An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. (CVSS 9.6)
- [CVE-2025-26469](https://cve.now/CVE-2025-26469.md): An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3 (CVSS 9.3)
- [CVE-2025-27724](https://cve.now/CVE-2025-27724.md): A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. (CVSS 9.3)
- [CVE-2025-32731](https://cve.now/CVE-2025-32731.md): A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7 (CVSS 6.1)
- [CVE-2025-24485](https://cve.now/CVE-2025-24485.md): A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. (CVSS 5.8)
- [CVE-2025-3480](https://cve.now/CVE-2025-3480.md): MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability (CVSS 5.3)
- [CVE-2025-3481](https://cve.now/CVE-2025-3481.md): MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 9.8)
- [CVE-2025-3482](https://cve.now/CVE-2025-3482.md): MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 9.8)
- [CVE-2025-3483](https://cve.now/CVE-2025-3483.md): MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 9.8)
- [CVE-2025-3484](https://cve.now/CVE-2025-3484.md): MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/meddream
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.