TVN ID	TVN-202510001
CVE ID	CVE-2025-11671, CVE-2025-11672
CVSS	CVE-2025-11671： 5.3 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2025-11672： 5.3 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products	Uniweb/SoliPACS WebServer version 12.1.2577 and earlier
Description	CVE-2025-11671(Missing Authentication)： Unauthenticated remote attackers can access a specific page to obtain information such as account names and IP addresses. CVE-2025-11672(Missing Authentication)： Unauthenticated remote attackers can access a specific page to obtain user group names.
Solution	Update to version after 12.1.2577
Credit	Kai(Deloitte)
Public Date	2025-10-13