Description
Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the 'portlet_user_id' URL parameter. A remote, unauthenticated attacker can craft a URL that can execute arbitrary JavaScript in the victim's browser. This issue is fixed as of 2025-03-14.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Medical Informatics Engineering | Enterprise Health | RC202503 – < RC202503 2025-04-08, RC202409 – < RC202409 2025-04-08, RC202403 – < RC202403 2025-04-08, RC202309 – < RC202309 2025-04-08 | RC202503 2025-04-08 |
Advisories 1
- VA-25-272-01 Medical Informatics Engineering Enterprise Health multiple vulnerabilities CISA ICS & IT advisories · Sep 29, 2025