CVE-2025-35034

Medical Informatics Engineering Enterprise Health has a reflected cross site scripting vulnerability in the 'portlet_user_id' URL parameter. A remote, unauthenticated attacker can craft a URL that can execute arbitrary JavaScript in the victim's browser. This issue is fixed as of 2025-03-14.

• CWE-79

• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-272-01.jsonThird Party Advisory
• https://www.cve.org/CVERecord?id=CVE-2025-35034Third Party Advisory, US Government Resource

Published

Sep 29, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-35029Medical Informatics Engineering Enterprise Health has a stor…5.4
• CVE-2025-3503The WP Maps WordPress plugin before 4.7.2 does not sanitise…4.8
• CVE-2025-35030Medical Informatics Engineering Enterprise Health has a cros…8.8
• CVE-2025-35031Medical Informatics Engineering Enterprise Health includes t…5.5
• CVE-2025-35032Medical Informatics Engineering Enterprise Health allows aut…9.9
• CVE-2025-35033Medical Informatics Engineering Enterprise Health has a CSV …4.3
• CVE-2025-35036Hibernate Validator before 6.2.0 and 7.0.0, by default and d…7.3
• CVE-2025-3504The WP Maps WordPress plugin before 4.7.2 does not sanitise…4.8
• CVE-2025-35041Airship AI Acropolis allows unlimited MFA attempts for 15 mi…7.7
• CVE-2025-35042Airship AI Acropolis includes a default administrative accou…9.8
• CVE-2025-35050Newforma Info Exchange (NIX) accepts serialized .NET data vi…9.8
• CVE-2025-35051Newforma Project Center Server (NPCS) accepts serialized .NE…9.8