CVE-2025-2264

High · 7.5

CVSS

7.5

EPSS

35.4%

Published

Mar 13, 2025

CISA due date

—

The record

A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed.

Affected packages

Ecosystem	Package	Introduced	Fixed