What’s Vulnerable › Products
CGM CLININET vulnerabilities
35 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 35 published in the last 12 months.
Check whether your CGM CLININET version is affected
Latest CGM CLININET vulnerabilities
- CVE-2025-58403 — Reflected Cross-Site Scripting (XSS) in CGM CLININET (CVSS 5.1)
- CVE-2025-30054 — Local Privilege Escalation in CGM CLININET (CVSS 9.3)
- CVE-2025-30053 — Missing Authentication in CGM CLININET (CVSS 6.9)
- CVE-2025-30052 — Authentication Bypass via IP Spoofing in CGM CLININET rsyncd (CVSS 8.8)
- CVE-2025-30051 — Insecure File Permissions in CGM CLININET (CVSS 6.8)
- CVE-2025-30050 — Remote Code Execution in CGM CLININET (CVSS 9.4)
- CVE-2025-30049 — Use of Unsalted MD5 Password Hashes in CGM CLININET (CVSS 8.2)
- CVE-2025-30047 — Remote Code Execution via Java Deserialization in CGM CLININET (CVSS 9.4)
- CVE-2025-30046 — Remote Code Execution in CGM CLININET (CVSS 9.0)
- CVE-2025-30045 — Code Injection in CGM CLININET (CVSS 8.6)
- CVE-2025-30043 — Missing Authentication in CGM CLININET (CVSS 7.1)
- CVE-2025-58406 — Lack of HTTP Response Headers (CVSS 4.3)
- CVE-2025-58405 — Lack of protection mechanisms against Clickjacking attacks (CVSS 6.1)
- CVE-2025-58402 — Insecure Direct Object Reference Message ID (CVSS 7.5)
- CVE-2025-30062 — SQL injection in CheckUnitCodeAndKey.pl (CVSS 6.9)
- CVE-2025-30044 — RCE on uhcapache user permissions (CVSS 9.4)
- CVE-2025-30042 — Session generation possible with certificate number only (CVSS 7.8)
- CVE-2025-30035 — Lack of API authentication allowing session generation for any user (CVSS 9.0)
- CVE-2025-30064 — Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key (CVSS 8.8)
- CVE-2025-30063 — Excessive permissions on configuration files containing database logins and passwords (CVSS 9.4)
- CVE-2025-30061 — SQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameter (CVSS 6.9)
- CVE-2025-30060 — SQL injection in ReturnUserUnitsXML.pl via the UserID parameter (CVSS 6.9)
- CVE-2025-30059 — Authenticated SQL injection in PrepareCDExportJSON.pl (CVSS 6.9)
- CVE-2025-30058 — SQL injection in getPatientIdentifier function of PatientService.pl (CVSS 6.9)
- CVE-2025-30057 — Authenticated RCE with uhcapache privileges in ConvertToPDF (CVSS 9.4)