Merative — Vulnerabilities & Security Advisories 3

Merative provides healthcare data analytics and clinical decision support solutions, processing sensitive patient information across its platforms. Historically, the organization's products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and access control flaws. While no major public security incidents have been widely reported, the three current CVEs highlight ongoing concerns about authentication bypass and injection flaws in their web applications. Their security posture reflects typical challenges in healthcare IT, where legacy systems and complex integrations create persistent exposure risks for critical infrastructure handling protected health information.