Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
CVE-2025-11671: EBM Uniweb/SoliPACS Web Server: Unauthenticated Access to Sensitive Info
CVE-2025-11671 · published 1 year ago
Summary
The EBM Uniweb/SoliPACS Web Server does not properly authenticate users. This means that anyone can access certain pages without a password, allowing them to view sensitive information like account names and IP addresses. To protect your data, update to the latest version of the software or apply the recommended fixes.
Original advisory text
Uniweb/SoliPACS WebServer developed by EBM Technologies has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access a specific page to obtain information such as...
Uniweb/SoliPACS WebServer developed by EBM Technologies has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access a specific page to obtain information such as account names and IP addresses.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published13 Oct 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-11671 · NVD
Track software like this
Free during beta