PatchTheCVEbiodose\/nmis vulnerabilities and fixes
Recent CVEs affecting biodose\/nmis, with upgrade or downgrade steps. 5 tracked.
biodose\/nmis has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-12-02. Highest priority: CVE-2025-62575 (score 43/100).
- CVE-2025-62575 HIGH 8.3 UPGRADE NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database
- CVE-2025-64298 HIGH 8.4 UPGRADE NMIS/BioDose V22.02 and previous version installations where the embedded Microsoft SQLServer Express is used
- CVE-2025-61940 HIGH 8.3 UPGRADE NMIS/BioDose V22.02 and previous versions rely on a common SQL Server user account to access data in the datab
- CVE-2025-64642 HIGH 8.0 UPGRADE NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissi
- CVE-2025-64778 HIGH 7.3 UPGRADE NMIS/BioDose software V22.02 and previous versions contain executable binaries with plain text hard-coded pass
FAQ
How do I fix biodose\/nmis vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is biodose\/nmis being exploited right now?
None of the tracked biodose\/nmis CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which biodose\/nmis CVE should I patch first?
CVE-2025-62575 currently ranks highest (43/100): NMIS/BioDose V22.02 and previous versions rely on a Microsoft SQL Server database.