BaselineWatch
Desk

CVE-2025-35032

6.2 medium SSVC exploitation: none Analyzed

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 1

  1. First seenCVSS 6.2 · miewebNVD modified 2026-10-09 09:10

Affected (CPE criteria) 5

  • cpe:2.3:a:mieweb:enterprise_health:rc202303:*:*:*:*:*:*:*
  • cpe:2.3:a:mieweb:enterprise_health:rc202309:*:*:*:*:*:*:*
  • cpe:2.3:a:mieweb:enterprise_health:rc202403:*:*:*:*:*:*:*
  • cpe:2.3:a:mieweb:enterprise_health:rc202409:*:*:*:*:*:*:*
  • cpe:2.3:a:mieweb:enterprise_health:rc202503:*:*:*:*:*:*:*

References 2