Cgm vulnerabilities

Products

• Clininet 35
• Clininet 4

Newest

• cgm clininet Reflected Cross-Site Scripting (XSS) in CGM CLININET CVE-2025-58403 5.1 MediumOctober 23, 2026
• cgm clininet Local Privilege Escalation in CGM CLININET CVE-2025-30054 9.3 CriticalOctober 23, 2026
• cgm clininet Missing Authentication in CGM CLININET CVE-2025-30053 6.9 MediumOctober 23, 2026
• cgm clininet Authentication Bypass via IP Spoofing in CGM CLININET rsyncd CVE-2025-30052 8.8 HighOctober 23, 2026
• cgm clininet Insecure File Permissions in CGM CLININET CVE-2025-30051 6.8 MediumOctober 23, 2026
• cgm clininet Remote Code Execution in CGM CLININET CVE-2025-30050 9.4 CriticalOctober 23, 2026
• cgm clininet Use of Unsalted MD5 Password Hashes in CGM CLININET CVE-2025-30049 8.2 HighOctober 23, 2026
• cgm clininet Remote Code Execution via Java Deserialization in CGM CLININET CVE-2025-30047 9.4 CriticalOctober 23, 2026
• cgm clininet Remote Code Execution in CGM CLININET CVE-2025-30046 9.0 CriticalOctober 23, 2026
• cgm clininet Code Injection in CGM CLININET CVE-2025-30045 8.6 HighOctober 23, 2026
• cgm clininet Missing Authentication in CGM CLININET CVE-2025-30043 7.1 HighOctober 23, 2026
• cgm clininet Lack of HTTP Response Headers CVE-2025-58406 5.3 MediumMarch 2, 2026
• cgm clininet Lack of protection mechanisms against Clickjacking attacks CVE-2025-58405 5.3 MediumMarch 2, 2026
• cgm clininet Insecure Direct Object Reference Message ID CVE-2025-58402 7.1 HighMarch 2, 2026
• cgm clininet SQL injection in CheckUnitCodeAndKey.pl CVE-2025-30062 6.9 MediumMarch 2, 2026
• cgm clininet RCE on uhcapache user permissions CVE-2025-30044 9.4 CriticalMarch 2, 2026
• cgm clininet Session generation possible with certificate number only CVE-2025-30042 9.0 CriticalMarch 2, 2026
• cgm clininet Lack of API authentication allowing session generation for any user CVE-2025-30035 9.0 CriticalMarch 2, 2026
• cgm netraad SQL injection in CGM NETRAAD CVE-2025-10350 8.8 HighMarch 2, 2026
• cgm clininet Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key CVE-2025-30064 8.8 HighAugust 27, 2025
• cgm clininet Excessive permissions on configuration files containing database logins and passwords CVE-2025-30063 9.4 CriticalAugust 27, 2025
• cgm clininet SQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameter CVE-2025-30061 6.9 MediumAugust 27, 2025
• cgm clininet SQL injection in ReturnUserUnitsXML.pl via the UserID parameter CVE-2025-30060 6.9 MediumAugust 27, 2025
• cgm clininet Authenticated SQL injection in PrepareCDExportJSON.pl CVE-2025-30059 6.9 MediumAugust 27, 2025
• cgm clininet SQL injection in getPatientIdentifier function of PatientService.pl CVE-2025-30058 6.9 MediumAugust 27, 2025
• cgm clininet Authenticated RCE with uhcapache privileges in ConvertToPDF CVE-2025-30057 9.4 CriticalAugust 27, 2025
• cgm clininet Calling system commands via RunCommand CVE-2025-30056 9.4 CriticalAugust 27, 2025
• cgm clininet Conditional RCE via the "system" function CVE-2025-30055 9.0 CriticalAugust 27, 2025
• cgm clininet Unauthenticated access to module configuration endpoint CVE-2025-30048 5.3 MediumAugust 27, 2025
• cgm clininet Missing authentication in APIs returning statistical data along with session IDs CVE-2025-30041 9.0 CriticalAugust 27, 2025
• cgm clininet Missing authentication in API returning request logs containing session IDs CVE-2025-30040 9.0 CriticalAugust 27, 2025
• cgm clininet Missing authentication in API returning a list of all active sessions CVE-2025-30039 9.0 CriticalAugust 27, 2025
• cgm clininet Session ID leakage in Zone.Identifier of downloaded files CVE-2025-30038 7.3 HighAugust 27, 2025
• cgm clininet Missing authentication in APIs allowing data retrieval and modification CVE-2025-30037 8.8 HighAugust 27, 2025
• cgm clininet Stored XSS permitting session takeover of arbitrary user CVE-2025-30036 8.8 HighAugust 27, 2025
• cgm clininet RCE via Print.pl in uhcPrintServerPrint CVE-2025-2313 9.4 CriticalAugust 27, 2025