Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-0…

低危 CVSS 3.4

CVECVE-2025-35032

首次发现2026-10-09 10:16 UTC

披露时间2025-09-29 20:15 UTC

最后更新2026-10-09 10:16 UTC

通道状态auto

摘要

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

受影响产品

数据来源

NVD DATABASE

原始链接

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-272-01.json Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-35032 Third Party Advisory

时间线

2026-10-09 nvd_ingest NVD