Enterprise Health
Approved changes feed: RSS · Atom
cpe:2.3:a:mieweb:enterprise_health:rc202403:*:*:*:*:*:*:*part: a version: rc202403 update: *
| Vendor | Mieweb (5feccde3-8683-5de9-b0f3-c847792c93c2) |
|---|---|
| Product | Enterprise Health (d8397a4c-07b0-53cc-ae9a-0cd0da42f6ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-35034 |
vulnerable | 2026-06-08 07:20:59.831902 |
Medical Informatics Engineering Enterprise Health reflected cross site scripting via portlet_user_id
MEDIUM (4.3)
Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the 'portlet_user_id' URL parameter. A remote, unauthenticated attacker can craft a URL that can execute arbitrary JavaScript in the victim's browser. This issue is fixed as of 2025-03-14.
Published: 2025-09-29T20:01:58.419Z
Updated: 2025-09-30T16:52:32.033Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35033 |
vulnerable | 2026-06-08 07:20:59.830887 |
Medical Informatics Engineering Enterprise Health CSV injection
MEDIUM (4.1)
Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14.
Published: 2025-09-29T20:01:38.144Z
Updated: 2025-09-30T16:52:03.135Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35032 |
vulnerable | 2026-06-08 07:20:59.830128 |
Medical Informatics Engineering Enterprise Health arbitrary file upload
LOW (3.4)
Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.
Published: 2025-09-29T20:01:09.311Z
Updated: 2025-09-30T16:51:39.465Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35031 |
vulnerable | 2026-06-08 07:20:59.829322 |
Medical Informatics Engineering Enterprise Health includes session token in debug output
LOW (3.3)
Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08.
Published: 2025-09-29T20:00:42.546Z
Updated: 2025-09-30T16:51:17.132Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35030 |
vulnerable | 2026-06-08 07:20:59.826389 |
Medical Informatics Engineering Enterprise Health cross site request forgery
HIGH (8.1)
Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08.
Published: 2025-09-29T20:00:16.950Z
Updated: 2025-09-30T16:50:38.126Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.