CVE-2023-7238

6.1 mediumEPSS 0.3%

Medium (6.1) in orthanc-server osimis web viewer. EPSS 0.3% chance of exploitation in the next 30 days.

A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebViewer the XSS vulnerability gets triggered. If exploited, the attacker will be able to execute arbitrary JavaScript code inside the victim's browser.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

orthanc-server:osimis_web_viewer

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-023-01
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-023-01

Check your stack JSON