VULNERABILITY INTELLIGENCE

CVE-2025-35033

CVSS score4.1 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2025-09-29
Last modified2026-10-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

Description

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. This issue is fixed as of 2025-03-14.

Weakness classification

  • 9119a7d8-5eab-497f-8521-727c672e3725: CWE-1236

Primary references