NovaRad Corporation NovaPACS Diagnostics Viewer vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting NovaRad Corporation NovaPACS Diagnostics Viewer: 1 record(s), with affected versions and fixes.
CVE-2018-25142
Critical · 9.8
CWE-611 Dec 24, 2025
NovaRad NovaPACS Diagnostics Viewer 8.5 XML External Entity Injection
NovaRad NovaPACS Diagnostics Viewer 8.5.19.75 contains an unauthenticated XML External Entity (XXE) injection vulnerability in XML preference import settings. Attackers can craft malicious XML files with DTD parameter entities to retrieve arbitrary system files through an out-of-band channel attack.