VYPR
← All advisories
High severity8.1NVD Advisory· Published Sep 29, 2025· Updated Jun 17, 2026

CVE-2025-35030

CVE-2025-35030

Description

Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Mieweb/Enterprise Health5 versions
    cpe:2.3:a:mieweb:enterprise_health:rc202303:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:mieweb:enterprise_health:rc202303:*:*:*:*:*:*:*
    • cpe:2.3:a:mieweb:enterprise_health:rc202309:*:*:*:*:*:*:*
    • cpe:2.3:a:mieweb:enterprise_health:rc202403:*:*:*:*:*:*:*
    • cpe:2.3:a:mieweb:enterprise_health:rc202409:*:*:*:*:*:*:*
    • cpe:2.3:a:mieweb:enterprise_health:rc202503:*:*:*:*:*:*:*
  • Medical Informatics Engineering/Enterprise Healthllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: RC202503

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.