Approved changes feed: RSS · Atom

cpe:2.3:a:mieweb:enterprise_health:rc202303:*:*:*:*:*:*:*

part: a version: rc202303 update: *

VendorMieweb (5feccde3-8683-5de9-b0f3-c847792c93c2)
ProductEnterprise Health (d8397a4c-07b0-53cc-ae9a-0cd0da42f6ea)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-35033 vulnerable 2026-06-08 07:20:59.830832 Medical Informatics Engineering Enterprise Health CSV injection
MEDIUM (4.1)
Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14.
Published: 2025-09-29T20:01:38.144Z
Updated: 2025-09-30T16:52:03.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-35032 vulnerable 2026-06-08 07:20:59.829874 Medical Informatics Engineering Enterprise Health arbitrary file upload
LOW (3.4)
Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.
Published: 2025-09-29T20:01:09.311Z
Updated: 2025-09-30T16:51:39.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-35030 vulnerable 2026-06-08 07:20:59.824313 Medical Informatics Engineering Enterprise Health cross site request forgery
HIGH (8.1)
Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08.
Published: 2025-09-29T20:00:16.950Z
Updated: 2025-09-30T16:50:38.126Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.