mieweb records
6 published records for vendor mieweb.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-1295 Debug Messages Revealing Unnecessary Information1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
34Monitor | CVE-2025-35030No exploit | Medical Informatics Engineering Enterprise Health cross site request forgerymieweb · enterprise health · CWE-352 | High8.6 | — | 0.1% | Sep 29, 2025 |
25Monitor | CVE-2025-35033No exploit | Medical Informatics Engineering Enterprise Health CSV injectionmieweb · enterprise health · CWE-1236 | Medium6.3 | — | 0.2% | Sep 29, 2025 |
24Monitor | CVE-2025-35032No exploit | Medical Informatics Engineering Enterprise Health arbitrary file uploadmieweb · enterprise health · CWE-434 | Medium6.2 | — | 0.2% | Sep 29, 2025 |
20Monitor | CVE-2025-35034No exploit | Medical Informatics Engineering Enterprise Health reflected cross site scripting via portlet_user_idmieweb · enterprise health · CWE-79 | Medium5.1 | — | 0.2% | Sep 29, 2025 |
19Monitor | CVE-2025-35029No exploit | Medical Informatics Engineering Enterprise Health stored cross site scripting via Demographic Information pagemieweb · enterprise health · CWE-79 | Medium4.8 | — | 0.2% | Nov 20, 2025 |
18Monitor | CVE-2025-35031No exploit | Medical Informatics Engineering Enterprise Health includes session token in debug outputmieweb · enterprise health · CWE-1295 | Medium4.6 | — | 0.1% | Sep 29, 2025 |
- CVE-2025-3503034Monitor
Medical Informatics Engineering Enterprise Health cross site request forgery
HighCVSS 8.6No exploitEPSS 0%mieweb · enterprise healthSep 29, 2025
- CVE-2025-3503325Monitor
Medical Informatics Engineering Enterprise Health CSV injection
MediumCVSS 6.3No exploitEPSS 0%mieweb · enterprise healthSep 29, 2025
- CVE-2025-3503224Monitor
Medical Informatics Engineering Enterprise Health arbitrary file upload
MediumCVSS 6.2No exploitEPSS 0%mieweb · enterprise healthSep 29, 2025
- CVE-2025-3503420Monitor
Medical Informatics Engineering Enterprise Health reflected cross site scripting via portlet_user_id
MediumCVSS 5.1No exploitEPSS 0%mieweb · enterprise healthSep 29, 2025
- CVE-2025-3502919Monitor
Medical Informatics Engineering Enterprise Health stored cross site scripting via Demographic Information page
MediumCVSS 4.8No exploitEPSS 0%mieweb · enterprise healthNov 20, 2025
- CVE-2025-3503118Monitor
Medical Informatics Engineering Enterprise Health includes session token in debug output
MediumCVSS 4.6No exploitEPSS 0%mieweb · enterprise healthSep 29, 2025