Advisories · Technology

Medical Informatics Engineering Enterprise Health.

Every CVE that names Medical Informatics Engineering Enterprise Health among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-35029 CVE record

CVSS 4.8 Medium

Medical Informatics Engineering Enterprise Health stored cross site scripting via Demographic Information page
- Medical Informatics Engineering Enterprise Health
- Cross-site scripting (XSS)
Not analysed yet 20 Nov 2025
CVE-2025-35034 CVE record

CVSS 5.1 Medium

Medical Informatics Engineering Enterprise Health reflected cross site scripting via portlet_user_id
- Medical Informatics Engineering Enterprise Health
- Cross-site scripting (XSS)
Not analysed yet 29 Sept 2025
CVE-2025-35033 CVE record

CVSS 6.3 Medium

Medical Informatics Engineering Enterprise Health CSV injection
- Medical Informatics Engineering Enterprise Health
- Other injection
Not analysed yet 29 Sept 2025
CVE-2025-35032 CVE record

CVSS 6.2 Medium

Medical Informatics Engineering Enterprise Health arbitrary file upload
- Medical Informatics Engineering Enterprise Health
- Unrestricted file upload
Not analysed yet 29 Sept 2025
CVE-2025-35031 CVE record

CVSS 4.6 Medium

Medical Informatics Engineering Enterprise Health includes session token in debug output
- Medical Informatics Engineering Enterprise Health
- CWE-1295
Not analysed yet 29 Sept 2025
CVE-2025-35030 CVE record

CVSS 8.6 High

Medical Informatics Engineering Enterprise Health cross site request forgery
- Medical Informatics Engineering Enterprise Health
- Cross-site request forgery (CSRF)
Not analysed yet 29 Sept 2025