Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2025-11671

EBM Technologies｜Uniweb/SoliPACS WebServer - Missing Authentication

Uniweb/SoliPACS WebServer developed by EBM Technologies has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access a specific page to obtain information such as account names and IP addresses.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Ebmtech
Products
Uniweb/solipacs Webserver
CVE-2025-11672

EBM Technologies｜Uniweb/SoliPACS WebServer - Missing Authentication

Uniweb/SoliPACS WebServer developed by EBM Technologies has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access a specific page to obtain user group names.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Ebmtech
Products
Uniweb/solipacs Webserver
CVE-2024-26262

EBM Technologies Uniweb/SoliPACS WebServer - SQL Injection

EBM Technologies Uniweb/SoliPACS WebServer's query functionality lacks proper restrictions of user input, allowing remote attackers authenticated as regular user to inject SQL commands for reading, modifying, and deleting database records, as well as executing system commands. Attackers may even leverage the dbo privilege in the database for privilege escalation, elevating their privileges to administrator .

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Ebmtech
Products
Uniweb\/solipacs Webserver
CVE-2024-26264

EBM Technologies RISWEB - SQL Injection

EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login. This allows remote attackers to inject SQL commands without authentication, enabling them to read, modify, and delete database records.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Ebmtech
Products
Risweb
CVE-2024-26263

EBM Technologies RISWEB - Improper Access Control

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ebm Technologies Ebmtech
Products
Risweb Risweb