Skip to contentCgm Clininet vulnerabilities
- cgm clininetReflected Cross-Site Scripting (XSS) in CGM CLININETCVE-2025-584035.1 Medium
- cgm clininetLocal Privilege Escalation in CGM CLININETCVE-2025-300549.3 Critical
- cgm clininetMissing Authentication in CGM CLININETCVE-2025-300536.9 Medium
- cgm clininetAuthentication Bypass via IP Spoofing in CGM CLININET rsyncdCVE-2025-300528.8 High
- cgm clininetInsecure File Permissions in CGM CLININETCVE-2025-300516.8 Medium
- cgm clininetRemote Code Execution in CGM CLININETCVE-2025-300509.4 Critical
- cgm clininetUse of Unsalted MD5 Password Hashes in CGM CLININETCVE-2025-300498.2 High
- cgm clininetRemote Code Execution via Java Deserialization in CGM CLININETCVE-2025-300479.4 Critical
- cgm clininetRemote Code Execution in CGM CLININETCVE-2025-300469.0 Critical
- cgm clininetCode Injection in CGM CLININETCVE-2025-300458.6 High
- cgm clininetMissing Authentication in CGM CLININETCVE-2025-300437.1 High
- cgm clininetLack of HTTP Response HeadersCVE-2025-584065.3 Medium
- cgm clininetLack of protection mechanisms against Clickjacking attacksCVE-2025-584055.3 Medium
- cgm clininetInsecure Direct Object Reference Message IDCVE-2025-584027.1 High
- cgm clininetSQL injection in CheckUnitCodeAndKey.plCVE-2025-300626.9 Medium
- cgm clininetRCE on uhcapache user permissionsCVE-2025-300449.4 Critical
- cgm clininetSession generation possible with certificate number onlyCVE-2025-300429.0 Critical
- cgm clininetLack of API authentication allowing session generation for any userCVE-2025-300359.0 Critical
- cgm clininetPossibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT keyCVE-2025-300648.8 High
- cgm clininetExcessive permissions on configuration files containing database logins and passwordsCVE-2025-300639.4 Critical
- cgm clininetSQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameterCVE-2025-300616.9 Medium
- cgm clininetSQL injection in ReturnUserUnitsXML.pl via the UserID parameterCVE-2025-300606.9 Medium
- cgm clininetAuthenticated SQL injection in PrepareCDExportJSON.plCVE-2025-300596.9 Medium
- cgm clininetSQL injection in getPatientIdentifier function of PatientService.plCVE-2025-300586.9 Medium
- cgm clininetAuthenticated RCE with uhcapache privileges in ConvertToPDFCVE-2025-300579.4 Critical
- cgm clininetCalling system commands via RunCommandCVE-2025-300569.4 Critical
- cgm clininetConditional RCE via the "system" functionCVE-2025-300559.0 Critical
- cgm clininetUnauthenticated access to module configuration endpointCVE-2025-300485.3 Medium
- cgm clininetMissing authentication in APIs returning statistical data along with session IDsCVE-2025-300419.0 Critical
- cgm clininetMissing authentication in API returning request logs containing session IDsCVE-2025-300409.0 Critical
- cgm clininetMissing authentication in API returning a list of all active sessionsCVE-2025-300399.0 Critical
- cgm clininetSession ID leakage in Zone.Identifier of downloaded filesCVE-2025-300387.3 High
- cgm clininetMissing authentication in APIs allowing data retrieval and modificationCVE-2025-300378.8 High
- cgm clininetStored XSS permitting session takeover of arbitrary userCVE-2025-300368.8 High
- cgm clininetRCE via Print.pl in uhcPrintServerPrintCVE-2025-23139.4 Critical