CVE-2025-35032

Katalog CVE

CVSS 9.9 · Critical EPSS 0,25%

Kerentanan Unrestricted Upload of File with Dangerous Type pada mieweb enterprise health. Skor CVSS 3.1 9.9 (Critical) menurut NVD.

Deskripsi (NVD)

Medical Informatics Engineering Enterprise Health allows authenticated users to upload arbitrary files. The impact of this behavior depends on how files are accessed. This issue is fixed as of 2025-04-08.

Rincian

Terbit di NVD

29 September 2025

Terakhir diubah

9 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

9.9 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-434: Unrestricted Upload of File with Dangerous Type

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 15,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-272-01.json advisory pihak ketiga
• https://www.cve.org/CVERecord?id=CVE-2025-35032 advisory pihak ketiga