Vulnerability · Published Sep 29, 2025 · Assigned by cisa-cg
CVE-2025-35032Medical Informatics Engineering Enterprise Health arbitrary file upload
Low 3.4
In plain English
A low-severity unrestricted file upload in Enterprise Health from Medical Informatics Engineering. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).
Severity (CVSS 3.1)3.4Low
Exploit odds (30 days)0.3%top 83.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Medical Informatics Engineering | Enterprise Health | 0 – before 2025-04-08 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N