Medium severity4.3NVD Advisory· Published Sep 29, 2025· Updated Jun 17, 2026
CVE-2025-35034
CVE-2025-35034
Description
Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the 'portlet_user_id' URL parameter. A remote, unauthenticated attacker can craft a URL that can execute arbitrary JavaScript in the victim's browser. This issue is fixed as of 2025-03-14.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6RC202503+ 1 more
- (no CPE)range: RC202503
- (no CPE)
cpe:2.3:a:mieweb:enterprise_health:rc202309:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:mieweb:enterprise_health:rc202309:*:*:*:*:*:*:*
- cpe:2.3:a:mieweb:enterprise_health:rc202403:*:*:*:*:*:*:*
- cpe:2.3:a:mieweb:enterprise_health:rc202409:*:*:*:*:*:*:*
- cpe:2.3:a:mieweb:enterprise_health:rc202503:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-272-01.jsonnvdThird Party Advisory
- www.cve.org/CVERecordnvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.