PT-2025-39873
CVE-2025-35032
·
Published
2025-09-29
·
Updated
2026-10-09
Description by
CVSS 3.1
9.9
CriticalMetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Medical Informatics Engineering Enterprise Health versions prior to 2025-04-08
Description
Authenticated users are able to upload arbitrary files. The impact of this behavior is dependent on how these files are accessed. Approximately 2000 healthcare organizations worldwide utilize this software. There are no details about real-world exploitation of this issue.
Recommendations
Update to version 2025-04-08 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾