Medical Informatics Engineering Enterprise Health multiple vulnerabilities
Advisory ansehen veröffentlicht 2025-09-29
Medical Informatics Engineering Enterprise Health is an OEHR (Occupational Electronic Health Record) platform. Enterprise Health contains multiple vulnerabilities that could allow an attacker to inject executable content, obtain session tokens, and upload arbitrary files.
01
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-35029US | medium5.4 | — | ||
Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'Demographic… | ||||
| CVE-2025-35034US | medium6.1 | — | ||
Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the 'portlet_user_id' URL parameter. A remote, unauthenticated attacker can… | ||||
| CVE-2025-35033US | medium4.3 | — | ||
Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This is… | ||||
| CVE-2025-35032US | critical9.9 | — | ||
Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is… | ||||
| CVE-2025-35031US | medium5.5 | — | ||
Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker,… | ||||
| CVE-2025-35030US | high8.8 | — | ||
Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (6)
- BehobenEnterprise Health
Fixed on 2025-03-14.
- BehobenEnterprise Health
Fixed on 2025-04-08.
- BehobenEnterprise Health
Fixed on 2025-04-08.
- BehobenEnterprise Health
Fixed on 2025-04-08.
- BehobenEnterprise Health
Fixed on 2025-04-08.
- BehobenEnterprise Health
Fixed on 2025-04-08.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan