Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Rainbowfishsoftware

First CVE: Sep 30, 2020Active for: 6 yearsTotal CVEs: 7

Rainbowfishsoftware maintains a narrowly scoped healthcare imaging product, PACSOne Server, that despite modest disclosure volume has drawn recurring focus on web-application and access-control weaknesses including cross-site scripting, SQL injection, path traversal, missing authentication for critical functions, and unrestricted file uploads—a pattern consistent with web-facing medical software. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and frequently acquire public exploit code, reflecting the product's role in protecting sensitive patient data and the appeal of healthcare infrastructure as a high-value target. Current exploitation activity, severity distribution, and exposure metrics are shown alongside this summary.

FAUCET AI Generated
7
Total CVEs
More Total CVEs than 88% of tracked vendors
3.5
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 95% of tracked vendors
8.0
Avg CVSS Score
Higher Avg CVSS Score than 78% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Rainbowfishsoftware over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 30, 2020
5 years ago
Most Recent CVE
Feb 3, 2021
1,998 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (7 CVEs).

7 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2020-29165CRITICAL
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by incorrect access control, which can result in remotely gaining administrator privileges.
Feb 3, 20219.828NONO
CVE-2020-29164MEDIUM
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).
Feb 3, 20216.127NOYES
CVE-2020-12870CRITICAL
RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page.
Sep 30, 20209.824NONO
CVE-2020-29166HIGH
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure.
Feb 3, 20217.522NONO
CVE-2020-29163HIGH
PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by SQL injection.
Feb 3, 20218.822NONO
CVE-2020-12715HIGH
RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control.
Sep 30, 20208.822NONO
CVE-2020-12869MEDIUM
RainbowFish PacsOne Server 6.8.4 allows XSS.
Sep 30, 20205.420NONO
View all 7 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products7 CVEs
29%
43%
29%
Severity distribution among all CVEs352,427 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None5 (71.4%)
Unknown0 (0.0%)
Required2 (28.6%)
Privileges Required
Low3 (42.9%)
High0 (0.0%)
None4 (57.1%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (7 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
14.3% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Rainbowfishsoftware.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Rainbowfishsoftware — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Rainbowfishsoftware's Products

View all 1 CNAs →

Top CWEs