CC
Product
CGM CLININET
18
CVEs
0
On KEV
9.4
Max CVSS
11
New 30D
Severity mix
Critical 6High 6Medium 6Low 0
Watch
Add CGM CLININET to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30050 New | 9.4 | Oct 23 | Remote Code Execution in CGM CLININET Affected: before 2026.MS3 |
| CVE-2025-30047 New | 9.4 | Oct 23 | Remote Code Execution via Java Deserialization in CGM CLININET Affected: before 2026.MS3 |
| CVE-2025-30044 | 9.4 | Mar 2 | RCE on uhcapache user permissions Affected: before 2025.MS2 |
| CVE-2025-30054 New | 9.3 | Oct 23 | Local Privilege Escalation in CGM CLININET Affected: through 2026.MS3 |
| CVE-2025-30046 New | 9.0 | Oct 23 | Remote Code Execution in CGM CLININET Affected: through 2026.MS3 |
| CVE-2025-30035 | 9.0 | Mar 2 | Lack of API authentication allowing session generation for any user Affected: before 2025.MS4 |
| CVE-2025-30052 New | 8.8 | Oct 23 | Authentication Bypass via IP Spoofing in CGM CLININET rsyncd Affected: through 2026.MS3 |
| CVE-2025-30045 New | 8.6 | Oct 23 | Code Injection in CGM CLININET Affected: through 2026.MS3 |
| CVE-2025-30049 New | 8.2 | Oct 23 | Use of Unsalted MD5 Password Hashes in CGM CLININET Affected: before 2026.MS1; before 2026.MS3 |
| CVE-2025-30042 | 7.8 | Mar 2 | Session generation possible with certificate number only Affected: before 2025.MS2 |
| CVE-2025-58402 | 7.5 | Mar 2 | Insecure Direct Object Reference Message ID Affected: before 2025.MS4 |
| CVE-2025-30043 New | 7.1 | Oct 23 | Missing Authentication in CGM CLININET Affected: before 2026.MS3 |
| CVE-2025-30053 New | 6.9 | Oct 23 | Missing Authentication in CGM CLININET Affected: through 2026.MS3 |
| CVE-2025-30062 | 6.9 | Mar 2 | SQL injection in CheckUnitCodeAndKey.pl Affected: before 2025.MS2 |
| CVE-2025-30051 New | 6.8 | Oct 23 | Insecure File Permissions in CGM CLININET Affected: before 2026.MS3 |
| CVE-2025-58405 | 6.1 | Mar 2 | Lack of protection mechanisms against Clickjacking attacks Affected: before 2025.MS3 |
| CVE-2025-58403 New | 5.1 | Oct 23 | Reflected Cross-Site Scripting (XSS) in CGM CLININET Affected: through 2025.MS3 |
| CVE-2025-58406 | 4.3 | Mar 2 | Lack of HTTP Response Headers Affected: before 2025.MS3 |
Showing 18