Medical Informatics Engineering Enterprise Health multiple vulnerabilities
view advisory published 2025-09-29
Medical Informatics Engineering Enterprise Health is an OEHR (Occupational Electronic Health Record) platform. Enterprise Health contains multiple vulnerabilities that could allow an attacker to inject executable content, obtain session tokens, and upload arbitrary files.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-35029US | medium5.4 | — | ||
Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'Demographic… | ||||
| CVE-2025-35034US | medium6.1 | — | ||
Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the 'portlet_user_id' URL parameter. A remote, unauthenticated attacker can… | ||||
| CVE-2025-35033US | medium4.3 | — | ||
Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This is… | ||||
| CVE-2025-35032US | critical9.9 | — | ||
Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is… | ||||
| CVE-2025-35031US | medium5.5 | — | ||
Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker,… | ||||
| CVE-2025-35030US | high8.8 | — | ||
Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (6)
- FixedEnterprise Health
Fixed on 2025-03-14.
- FixedEnterprise Health
Fixed on 2025-04-08.
- FixedEnterprise Health
Fixed on 2025-04-08.
- FixedEnterprise Health
Fixed on 2025-04-08.
- FixedEnterprise Health
Fixed on 2025-04-08.
- FixedEnterprise Health
Fixed on 2025-04-08.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan