What is CVE-2025-35032?

CVE-2025-35032 is a low-severity vulnerability in Medical Informatics Engineering Enterprise Health, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 3.4/10. Published 2025-09-29.

How severe is CVE-2025-35032?

Low severity. CVSS v3 base score is 3.4 out of 10.

Arbitrary file upload in Medical Informatics Engineering Enterprise Health

CVE-2025-35032

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.

Vulnerability class: Unrestricted File Upload

EPSS: 0.002 (14.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.4 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N.

Affected products

Medical Informatics Engineering Enterprise Health — versions 0, 2025-04-08
Mieweb Enterprise_health — versions rc202303, rc202309, rc202403

Weakness classification (CWE)

CWE-434 — Unrestricted Upload of File with Dangerous Type

References

9119a7d8-5eab-497f-8521-727c672e3725 (Third Party Advisory)
9119a7d8-5eab-497f-8521-727c672e3725 (Third Party Advisory)

Frequently asked questions

What is CVE-2025-35032?: CVE-2025-35032 is a low-severity vulnerability in Medical Informatics Engineering Enterprise Health, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 3.4/10. Published 2025-09-29.
How severe is CVE-2025-35032?: Low severity. CVSS v3 base score is 3.4 out of 10.