CC
Product
CGM CLININET
35
CVEs
0
On KEV
9.4
Max CVSS
11
New 30D
Severity mix
Critical 14High 10Medium 11Low 0
Watch
Add CGM CLININET to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30052 New | 8.8 | Oct 23 | Authentication Bypass via IP Spoofing in CGM CLININET rsyncd Affected: through 2026.MS3 |
| CVE-2025-30064 | 8.8 | Aug 27 | Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key Affected: before 2025.MS2 |
| CVE-2025-30037 | 8.8 | Aug 27 | Missing authentication in APIs allowing data retrieval and modification Affected: before 2025.MS2 |
| CVE-2025-30036 | 8.8 | Aug 27 | Stored XSS permitting session takeover of arbitrary user Affected: before 2024.MS4 |
| CVE-2025-30045 New | 8.6 | Oct 23 | Code Injection in CGM CLININET Affected: through 2026.MS3 |
| CVE-2025-30049 New | 8.2 | Oct 23 | Use of Unsalted MD5 Password Hashes in CGM CLININET Affected: before 2026.MS1; before 2026.MS3 |
| CVE-2025-30042 | 7.8 | Mar 2 | Session generation possible with certificate number only Affected: before 2025.MS2 |
| CVE-2025-58402 | 7.5 | Mar 2 | Insecure Direct Object Reference Message ID Affected: before 2025.MS4 |
| CVE-2025-30038 | 7.3 | Aug 27 | Session ID leakage in Zone.Identifier of downloaded files Affected: before 2025.MS1 |
| CVE-2025-30043 New | 7.1 | Oct 23 | Missing Authentication in CGM CLININET Affected: before 2026.MS3 |
Showing 10