CVEvulnerability

CVE-2025-35032

6.2 MEDIUM Published 2025-09-29 Modified 2026-10-09 Official page ↗
Status
Analyzed
Published
2025-09-29
Last modified
2026-10-09
Assigner
9119a7d8-5eab-497f-8521-727c672e3725
CVSS 4.0 (9119a7d8-5eab-497f-8521-727c672e3725)
6.2 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 (9119a7d8-5eab-497f-8521-727c672e3725)
3.4 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N
CVSS 3.1 ([email protected])
9.9 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-434

Description

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.

Affected configurations

• mieweb enterprise health rc202303 • mieweb enterprise health rc202309 • mieweb enterprise health rc202403 • mieweb enterprise health rc202409 • mieweb enterprise health rc202503

Related

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References