OR
Product
orthanc
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 7Medium 2Low 0
Watch
Add orthanc to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-33466 | 8.8 | Jun 29 | Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the… Affected: before 1.12.0 |
| CVE-2026-5439 | 7.5 | Apr 9 | Memory Exhaustion via Forged ZIP Metadata Affected: before 1.12.11 |
| CVE-2026-5437 | 7.5 | Apr 9 | Out-of-Bounds Read in DicomStreamReader Affected: before 1.12.11 |
| CVE-2026-5438 | 7.5 | Apr 9 | Gzip Decompression Bomb via Content-Encoding Header Affected: before 1.12.11 |
| CVE-2026-5440 | 7.5 | Apr 9 | Memory Exhaustion via Unbounded Content-Length Affected: before 1.12.11 |
| CVE-2026-5444 | 7.1 | Apr 9 | Heap Buffer Overflow in PAM Image Buffer Allocation Affected: before 1.12.11 |
| CVE-2026-5441 | 7.1 | Apr 9 | Out-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression) Affected: before 1.12.11 |
Showing 7