Syngo Dynamics Cardiovascular Imaging And Information System

syngo_dynamics_cardiovascular_imaging_and_information_system

Vendor: Siemens • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-42894 1Siemens 1Syngo Dynamics Cardiovascular Imaging And Information System Apr 30, 2025 Nov 17, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Request Forgery (SSRF) vulnerability was identified in one of the web services exposed on the syngo Dynami...Show more A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Request Forgery (SSRF) vulnerability was identified in one of the web services exposed on the syngo Dynamics application that could allow for the leaking of NTLM credentials as well as local service enumeration.Show less
CVE-2022-42893 1Siemens 1Syngo Dynamics Cardiovascular Imaging And Information System Apr 30, 2025 Nov 17, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write dat...Show more A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool.Show less
CVE-2022-42892 1Siemens 1Syngo Dynamics Cardiovascular Imaging And Information System Apr 30, 2025 Nov 17, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow directory li...Show more A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow directory listing in any folder accessible to the account assigned to the website’s application pool.Show less
CVE-2022-42891 1Siemens 1Syngo Dynamics Cardiovascular Imaging And Information System Apr 29, 2025 Nov 17, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write dat...Show more A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool.Show less
CVE-2022-42734 1Siemens 1Syngo Dynamics Cardiovascular Imaging And Information System Apr 29, 2025 Nov 17, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write dat...Show more A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the website’s application pool.Show less
CVE-2022-42733 1Siemens 1Syngo Dynamics Cardiovascular Imaging And Information System Apr 29, 2025 Nov 17, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be r...Show more A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be retrieved from any folder accessible to the account assigned to the website’s application pool.Show less
CVE-2022-42732 1Siemens 1Syngo Dynamics Cardiovascular Imaging And Information System Apr 29, 2025 Nov 17, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be r...Show more A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be retrieved from any folder accessible to the account assigned to the website’s application pool.Show less