Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-0…

Low CVSS 3.4

CVECVE-2025-35032

First seen2026-10-09 10:16 UTC

Disclosed2025-09-29 20:15 UTC

Last updated2026-10-09 10:16 UTC

Channel statusauto

Summary

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-272-01.json Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-35032 Third Party Advisory

Timeline

2026-10-09 nvd_ingest NVD