Description
Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Medical Informatics Engineering | Enterprise Health | RC202503 – < RC202503 2025-03-14, RC202409 – < RC202409 2025-03-14, RC202403 – < RC202403 2025-03-14, RC202309 – < RC202309 2025-03-14, RC202303 – < RC202303 2025-03-14 | RC202503 2025-03-14 |
Advisories 1
- VA-25-272-01 Medical Informatics Engineering Enterprise Health multiple vulnerabilities CISA ICS & IT advisories · Sep 29, 2025