Vertikalsystems Hospital Manager Backend Services — known CVE vulnerabilities

Every CVE whose affected-product data names Vertikalsystems Hospital Manager Backend Services, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-54459 — CVSS 7.5 (high): Prior to September 19, 2025, the Hospital Manager Backend Services exposed the ASP.NET tracing endpoint /trace.axd without authentication…
• CVE-2025-61959 — CVSS 5.3 (medium): Prior to September 19, 2025, the Hospital Manager Backend Services returned verbose ASP.NET error pages for invalid WebResource.axd…