HIGHCVSS 8.1Vulnerability

CVE-2025-35030

Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08.

Properties

Severity: HIGH
Epss score: 0.00198
Cvss severity: HIGH
Cvss score: 8.1
Retrieved at: 2026-10-21T01:24:47+00:00
Last source: FIRST EPSS
Score: 8.1
Cve id: CVE-2025-35030
Cvss vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
First seen by Signal: 2026-10-09T11:40:50+00:00
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Published at: 2025-09-29T20:15:32.467
Last modified: 2026-10-09T09:10:00.213
Epss percentile: 0.08978

Related Entities (6)

AFFECTS_PRODUCT (5)

→[Product]cpe:2.3:a:mieweb:enterprise_health:rc202503:*:*:*:*:*:*:*

→[Product]cpe:2.3:a:mieweb:enterprise_health:rc202409:*:*:*:*:*:*:*

→[Product]cpe:2.3:a:mieweb:enterprise_health:rc202403:*:*:*:*:*:*:*

→[Product]cpe:2.3:a:mieweb:enterprise_health:rc202303:*:*:*:*:*:*:*

→[Product]cpe:2.3:a:mieweb:enterprise_health:rc202309:*:*:*:*:*:*:*

HAS_WEAKNESS (1)

→[Weakness]Cross-Site Request Forgery (CSRF)

Explore deeper with Ninja Signal's threat intelligence graph

Search in Spektr Open Signal Desktop