Vendors / Medical Informatics Engineering Medical Informatics Engineering Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Medical Informatics Engineering records in CISA KEV No Medical Informatics Engineering vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on be…
CVSS 4.0 HIGH 8.6· Network · No auth · User interaction · EPSS 0.00198 · Published 2025-09-29 · Fixed in RC202503 2025-04-08, RC202409 2025-04-08 +3 CWE-352
Priority LOW 28
Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files.
CVSS 4.0 MEDIUM 6.3· Network · Low privileges · User interaction · EPSS 0.00243 · Published 2025-09-29 · Fixed in RC202503 2025-03-14, RC202409 2025-03-14 +3 CWE-1236
Priority LOW 27
Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files.
CVSS 4.0 MEDIUM 6.2· Network · High privileges · User interaction · EPSS 0.00253 · Published 2025-09-29 · Fixed in 2025-04-08 CWE-434
Priority LOW 23
Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the 'portlet_user_id' URL parameter.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00258 · Published 2025-09-29 · Fixed in RC202503 2025-04-08, RC202409 2025-04-08 +2 CWE-79
Priority LOW 21
Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'Demographic Information' page.
CVSS 4.0 MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.0022 · Published 2025-11-20 · Fixed in RC202503 2025-04-08, RC202409 2025-04-08 +2 CWE-79
Priority LOW 20
Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output.
CVSS 4.0 MEDIUM 4.6· Local · No auth · User interaction · EPSS 0.00142 · Published 2025-09-29 · Fixed in RC202503 2025-04-08, RC202409 2025-04-08 +1 CWE-1295
Open these records in search → All records by CVSS severity
Critical0 High1 Medium5 Low0 No CVSS0