CVE-2025-27720 CRITICAL

CVE-2025-27720: Pixmeo OsiriX MD Cleartext Transmission of Sensitive Information

Vendor Pixmeo
Product OsiriX MD
Weakness CWE-319 · Cleartext transmission
Published May 8, 2025
Last update May 9, 2025
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials.

Key dates

02Disclosure timeline

May 8, 2025 CVE published
May 9, 2025 Record updated