CVE-2025-35032

Medical Informatics Engineering Enterprise Health arbitrary file upload

CVSS 6.2 MEDIUMEPSS 0.2%CWE-434

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H

Affected products

Medical Informatics Engineering · Enterprise Health

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-272-01.json https://www.cve.org/CVERecord?id=CVE-2025-35032