Enterprise Health vulnerabilities

2 known vulnerabilities in Enterprise Health from Medical Informatics Engineering. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  Enterprise Health: Unrestricted Upload of File with Dangerous Type

  CVE-2025-35032Sep 29, 2025Medical Informatics Engineering

  Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.

• 8.8 High severity

  Enterprise Health: Cross-Site Request Forgery

  CVE-2025-35030Sep 29, 2025Medical Informatics Engineering

  Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This i