Description
Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'Demographic Information' page. This content will be rendered and executed when a victim accesses it. This issue is fixed as of 2025-03-14.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Medical Informatics Engineering | Enterprise Health | RC202503 – < RC202503 2025-04-08, RC202409 – < RC202409 2025-04-08, RC202403 – < RC202403 2025-04-08, RC202309 – < RC202309 2025-04-08 | RC202503 2025-04-08 |
Advisories 1
- VA-25-272-01 Medical Informatics Engineering Enterprise Health multiple vulnerabilities CISA ICS & IT advisories · Sep 29, 2025