Read the docs

Medical Informatics Engineering

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Medical Informatics Engineering records in CISA KEV

No Medical Informatics Engineering vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records

Priority LOW 39

Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on be…

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00198 Published 2025-09-29 Fixed in RC202503 2025-04-08, RC202409 2025-04-08 +3 CWE-352
Priority LOW 28

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files.

CVSS 4.0MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00243 Published 2025-09-29 Fixed in RC202503 2025-03-14, RC202409 2025-03-14 +3 CWE-1236
Priority LOW 21

Medical Informatics Engineering Enterprise Health has a stored cross site scripting vulnerability that allows an authenticated attacker to add arbitrary content in the 'Demographic Information' page.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.0022 Published 2025-11-20 Fixed in RC202503 2025-04-08, RC202409 2025-04-08 +2 CWE-79
Open these records in search →