Skip to content
OpenAdvisories

Vendor

Medical Informatics Engineering

6 known vulnerabilities.

Products

Enterprise Health 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-35034

    Medical Informatics Engineering Enterprise Health reflected cross site scripting via portlet_user_id

    Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the 'portlet_user_id' URL parameter. A remote, unauthenticated attacker can craft a URL that can execute arbitrary JavaScript in the victim's browser. This…

    Medical Informatics Engineering Enterprise Health
  • Medium 4.1
    CVE-2025-35033

    Medical Informatics Engineering Enterprise Health CSV injection

    Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14.

    Medical Informatics Engineering Enterprise Health