Description
Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Medical Informatics Engineering | Enterprise Health | RC202503 – < RC202503 2025-04-08, RC202409 – < RC202409 2025-04-08, RC202403 – < RC202403 2025-04-08, RC202309 – < RC202309 2025-04-08, RC202303 – < RC202303 2025-04-08 | RC202503 2025-04-08 |
Advisories 1
- VA-25-272-01 Medical Informatics Engineering Enterprise Health multiple vulnerabilities CISA ICS & IT advisories · Sep 29, 2025