PT-2025-47627 · Medical Informatics Engineering · Enterprise Health

Fernando Martinez + 3 · Published 2025-11-20 · Updated 2025-12-31 · CVE-2025-35029

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Medical Informatics Engineering Enterprise Health (affected versions not specified)

Description An authenticated attacker can inject arbitrary content into the 'Demographic Information' page, leading to the execution of malicious code when a victim accesses the page. This is a stored cross-site scripting issue.

Recommendations Update to a version released on or after 2025-03-14.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-35029

Affected Products

Enterprise Health

References · 8

• https://osv.dev/vulnerability/CVE-2025-35029 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-35029 · Security Note
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-272-01.json · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-35029 · Security Note
• https://twitter.com/CVEnew/status/1991595058013876621 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1991645166269067766 · Twitter Post
• https://t.me/cveNotify/147317 · Telegram Post
• https://t.me/CVEtracker/37866 · Telegram Post