CVE-2025-8307: Asseco Infomedica Plus

Medium severity, CVSS 5.9. EPSS: 0.1% chance of exploitation in the next 30 days.

Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sector. Passwords of all users are stored in a database in an encoded format. An attacker in possession of these encoded passwords is able to decode them by using an algorithm embedded in the client-side part of the software.  This vulnerability has been fixed in versions 4.50.1 and 5.38.0

Affected products

• Asseco Infomedica Plus: from 5.0.0, before 5.38.0 (fixed in 5.38.0); from 4.0.0, before 4.50.1 (fixed in 4.50.1)

Published 2026-01-08. Last modified 2026-10-07.