CVE-2025-35030

HIGH

Mieweb Enterprise Health - CSRF

Title source: rule

Description

Medical Informatics Engineering Enterprise Health has a cross site request forgery vulnerability that allows an unauthenticated attacker to trick administrative users into clicking a crafted URL and perform actions on behalf of that administrative user. This issue is fixed as of 2025-04-08.

References (2)

[Third Party Advisory] https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-272-01.json

[Third Party Advisory] https://www.cve.org/CVERecord?id=CVE-2025-35030

Scores

CVSS v3 8.1

EPSS 0.0002

EPSS Percentile 5.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Classification

CWE

CWE-352

Status published

Affected Products (5)

mieweb/enterprise_health

Timeline

Published Sep 29, 2025

Tracked Since Feb 18, 2026