CC
Product
CGM CLININET
35
CVEs
0
On KEV
9.4
Max CVSS
11
New 30D
Severity mix
Critical 14High 10Medium 11Low 0
Watch
Add CGM CLININET to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30050 New | 9.4 | Oct 23 | Remote Code Execution in CGM CLININET Affected: before 2026.MS3 |
| CVE-2025-30047 New | 9.4 | Oct 23 | Remote Code Execution via Java Deserialization in CGM CLININET Affected: before 2026.MS3 |
| CVE-2025-30044 | 9.4 | Mar 2 | RCE on uhcapache user permissions Affected: before 2025.MS2 |
| CVE-2025-30063 | 9.4 | Aug 27 | Excessive permissions on configuration files containing database logins and passwords Affected: before 2024.MS4 |
| CVE-2025-30057 | 9.4 | Aug 27 | Authenticated RCE with uhcapache privileges in ConvertToPDF Affected: before 2024.MS4 |
| CVE-2025-30056 | 9.4 | Aug 27 | Calling system commands via RunCommand Affected: before 2024.MS4.33 |
| CVE-2025-2313 | 9.4 | Aug 27 | RCE via Print.pl in uhcPrintServerPrint Affected: before 2025.MS1 |
| CVE-2025-30054 New | 9.3 | Oct 23 | Local Privilege Escalation in CGM CLININET Affected: through 2026.MS3 |
| CVE-2025-30046 New | 9.0 | Oct 23 | Remote Code Execution in CGM CLININET Affected: through 2026.MS3 |
| CVE-2025-30035 | 9.0 | Mar 2 | Lack of API authentication allowing session generation for any user Affected: before 2025.MS4 |
| CVE-2025-30055 | 9.0 | Aug 27 | Conditional RCE via the "system" function Affected: before 2024.MS4 |
| CVE-2025-30041 | 9.0 | Aug 27 | Missing authentication in APIs returning statistical data along with session IDs Affected: before 2025.MS1 |
| CVE-2025-30040 | 9.0 | Aug 27 | Missing authentication in API returning request logs containing session IDs Affected: before 2024.MS4 |
| CVE-2025-30039 | 9.0 | Aug 27 | Missing authentication in API returning a list of all active sessions Affected: before 2024.MS4 |
Showing 14