CG
Vendor
CGM
23
CVEs
0
On KEV
11
New 30D
Products
CC9.4
CGM CLININET
CGM
18 CVEs0 on KEV11 new
CL7.8
Clininet
Cgm
4 CVEs0 on KEV0 new
CN8.8
CGM NETRAAD
CGM
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-58403 New | CC CGM CLININET CGM | 5.1 | Oct 23 | Reflected Cross-Site Scripting (XSS) in CGM CLININET |
| CVE-2025-30054 New | CC CGM CLININET CGM | 9.3 | Oct 23 | Local Privilege Escalation in CGM CLININET |
| CVE-2025-30053 New | CC CGM CLININET CGM | 6.9 | Oct 23 | Missing Authentication in CGM CLININET |
| CVE-2025-30052 New | CC CGM CLININET CGM | 8.8 | Oct 23 | Authentication Bypass via IP Spoofing in CGM CLININET rsyncd |
| CVE-2025-30051 New | CC CGM CLININET CGM | 6.8 | Oct 23 | Insecure File Permissions in CGM CLININET |
| CVE-2025-30050 New | CC CGM CLININET CGM | 9.4 | Oct 23 | Remote Code Execution in CGM CLININET |
| CVE-2025-30049 New | CC CGM CLININET CGM | 8.2 | Oct 23 | Use of Unsalted MD5 Password Hashes in CGM CLININET |
| CVE-2025-30047 New | CC CGM CLININET CGM | 9.4 | Oct 23 | Remote Code Execution via Java Deserialization in CGM CLININET |
| CVE-2025-30046 New | CC CGM CLININET CGM | 9.0 | Oct 23 | Remote Code Execution in CGM CLININET |
| CVE-2025-30045 New | CC CGM CLININET CGM | 8.6 | Oct 23 | Code Injection in CGM CLININET |
| CVE-2025-30043 New | CC CGM CLININET CGM | 7.1 | Oct 23 | Missing Authentication in CGM CLININET |
| CVE-2025-58406 | CC CGM CLININET CGM | 4.3 | Mar 2 | Lack of HTTP Response Headers |
| CVE-2025-58405 | CC CGM CLININET CGM | 6.1 | Mar 2 | Lack of protection mechanisms against Clickjacking attacks |
| CVE-2025-58402 | CC CGM CLININET CGM | 7.5 | Mar 2 | Insecure Direct Object Reference Message ID |
| CVE-2025-30062 | CC CGM CLININET CGM | 6.9 | Mar 2 | SQL injection in CheckUnitCodeAndKey.pl |
| CVE-2025-30044 | CC CGM CLININET CGM | 9.4 | Mar 2 | RCE on uhcapache user permissions |
| CVE-2025-30042 | CC CGM CLININET CGM | 7.8 | Mar 2 | Session generation possible with certificate number only |
| CVE-2025-30035 | CC CGM CLININET CGM | 9.0 | Mar 2 | Lack of API authentication allowing session generation for any user |
| CVE-2025-10350 | CN CGM NETRAAD CGM | 8.8 | Mar 2 | SQL injection in CGM NETRAAD |