CVE-2025-35031: Mieweb Enterprise Health

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08.

Affected products

• Mieweb Enterprise Health: version rc202403 only; version rc202409 only; version rc202503 only

Published 2025-09-29. Last modified 2026-10-09.