CVE-2018-25142 | BDVDB-2026-307477 Detail

Description#

NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import settings. Attackers can craft malicious XML files with DTD parameter entities to retrieve arbitrary system files through an out-of-band channel attack.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-12-24Record published in the CVE List.
2. Version 22026-07-28Most recent update recorded in the CVE List.