Nov 19, 2025
CVE-2025-63958 – MILLENSYS Vision Tools Workspace Unauthenticated Configuration Disclosure
Public advisory for CVE-2025-63958: A critical unauthenticated configuration disclosure in MILLENSYS Vision Tools Workspace exposing plaintext database credentials, system configuration, and internal paths via the /MILLENSYS/settings endpoint.
#cve-2025-63958 #millensys #pacs #medical-systems #information-disclosure #ozex #critical #cwe-306 #cwe-200 #t1210 #t1552