VYPR
← All advisories
Medium severity4.1NVD Advisory· Published Sep 29, 2025· Updated Jun 17, 2026

CVE-2025-35033

CVE-2025-35033

Description

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Mieweb/Enterprise Health5 versions
    cpe:2.3:a:mieweb:enterprise_health:rc202303:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:mieweb:enterprise_health:rc202303:*:*:*:*:*:*:*
    • cpe:2.3:a:mieweb:enterprise_health:rc202309:*:*:*:*:*:*:*
    • cpe:2.3:a:mieweb:enterprise_health:rc202403:*:*:*:*:*:*:*
    • cpe:2.3:a:mieweb:enterprise_health:rc202409:*:*:*:*:*:*:*
    • cpe:2.3:a:mieweb:enterprise_health:rc202503:*:*:*:*:*:*:*
  • Medical Informatics Engineering/Enterprise Healthllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: RC202503

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.