CVE-2025-11672

MediumCVSS 5.3

Published: 13/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

Uniweb/SoliPACS WebServer developed by EBM Technologies has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access a specific page to obtain user group names.

Risk Assessment

An attacker can obtain information about user group structure without authentication, facilitating further social engineering and reconnaissance.

Recommendation

Restrict access to the web interface (e.g., via firewall or VPN) as soon as possible and apply the vendor patch when available.

Other vulnerabilities in Uniweb/SoliPACS WebServer

CVE-2025-11671Medium
Uniweb/SoliPACS WebServer developed by EBM Technologies has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access a specific page to obtain information such as account names and IP addresses.

Original NVD description (English source)

Uniweb/SoliPACS WebServer developed by EBM Technologies has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access a specific page to obtain user group names.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS