Login Request a demo
CG
Vendor
CGM
3 products with CVEs on record
40
CVEs
0
On KEV
11
New 30D
Products
CC
CGM CLININET
CGM
9.4
35 CVEs0 on KEV11 new
CL
Clininet
Cgm
7.8
4 CVEs0 on KEV0 new
CN
CGM NETRAAD
CGM
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-58403
New
CC
CGM CLININET
CGM
5.1
0%
Oct 23Reflected Cross-Site Scripting (XSS) in CGM CLININET
CVE-2025-30054
New
CC
CGM CLININET
CGM
9.3
0%
Oct 23Local Privilege Escalation in CGM CLININET
CVE-2025-30053
New
CC
CGM CLININET
CGM
6.9
0%
Oct 23Missing Authentication in CGM CLININET
CVE-2025-30052
New
CC
CGM CLININET
CGM
8.8
0%
Oct 23Authentication Bypass via IP Spoofing in CGM CLININET rsyncd
CVE-2025-30051
New
CC
CGM CLININET
CGM
6.8
0%
Oct 23Insecure File Permissions in CGM CLININET
CVE-2025-30050
New
CC
CGM CLININET
CGM
9.4
0%
Oct 23Remote Code Execution in CGM CLININET
CVE-2025-30049
New
CC
CGM CLININET
CGM
8.2
0%
Oct 23Use of Unsalted MD5 Password Hashes in CGM CLININET
CVE-2025-30047
New
CC
CGM CLININET
CGM
9.4
0%
Oct 23Remote Code Execution via Java Deserialization in CGM CLININET
CVE-2025-30046
New
CC
CGM CLININET
CGM
9.0
0%
Oct 23Remote Code Execution in CGM CLININET
CVE-2025-30045
New
CC
CGM CLININET
CGM
8.6
0%
Oct 23Code Injection in CGM CLININET
CVE-2025-30043
New
CC
CGM CLININET
CGM
7.1
0%
Oct 23Missing Authentication in CGM CLININET
CVE-2025-58406
CC
CGM CLININET
CGM
4.3
0%
Mar 2Lack of HTTP Response Headers
CVE-2025-58405
CC
CGM CLININET
CGM
6.1
0%
Mar 2Lack of protection mechanisms against Clickjacking attacks
CVE-2025-58402
CC
CGM CLININET
CGM
7.5
0%
Mar 2Insecure Direct Object Reference Message ID
CVE-2025-30062
CC
CGM CLININET
CGM
6.9
0%
Mar 2SQL injection in CheckUnitCodeAndKey.pl
CVE-2025-30044
CC
CGM CLININET
CGM
9.4
1%
Mar 2RCE on uhcapache user permissions
CVE-2025-30042
CC
CGM CLININET
CGM
7.8
0%
Mar 2Session generation possible with certificate number only
CVE-2025-30035
CC
CGM CLININET
CGM
9.0
0%
Mar 2Lack of API authentication allowing session generation for any user
CVE-2025-10350
CN
CGM NETRAAD
CGM
8.8
0%
Mar 2SQL injection in CGM NETRAAD
CVE-2025-30064
CC
CGM CLININET
CGM
8.8
0%
Aug 27Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key
CVE-2025-30063
CC
CGM CLININET
CGM
9.4
0%
Aug 27Excessive permissions on configuration files containing database logins and passwords
CVE-2025-30061
CC
CGM CLININET
CGM
6.9
0%
Aug 27SQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameter
CVE-2025-30060
CC
CGM CLININET
CGM
6.9
0%
Aug 27SQL injection in ReturnUserUnitsXML.pl via the UserID parameter
CVE-2025-30059
CC
CGM CLININET
CGM
6.9
0%
Aug 27Authenticated SQL injection in PrepareCDExportJSON.pl
CVE-2025-30058
CC
CGM CLININET
CGM
6.9
0%
Aug 27SQL injection in getPatientIdentifier function of PatientService.pl
CVE-2025-30057
CC
CGM CLININET
CGM
9.4
1%
Aug 27Authenticated RCE with uhcapache privileges in ConvertToPDF
CVE-2025-30056
CC
CGM CLININET
CGM
9.4
0%
Aug 27Calling system commands via RunCommand
CVE-2025-30055
CC
CGM CLININET
CGM
9.0
0%
Aug 27Conditional RCE via the "system" function
CVE-2025-30048
CC
CGM CLININET
CGM
5.3
0%
Aug 27Unauthenticated access to module configuration endpoint
CVE-2025-30041
CC
CGM CLININET
CGM
9.0
0%
Aug 27Missing authentication in APIs returning statistical data along with session IDs
CVE-2025-30040
CC
CGM CLININET
CGM
9.0
0%
Aug 27Missing authentication in API returning request logs containing session IDs
CVE-2025-30039
CC
CGM CLININET
CGM
9.0
0%
Aug 27Missing authentication in API returning a list of all active sessions
CVE-2025-30038
CC
CGM CLININET
CGM
7.3
0%
Aug 27Session ID leakage in Zone.Identifier of downloaded files
CVE-2025-30037
CC
CGM CLININET
CGM
8.8
0%
Aug 27Missing authentication in APIs allowing data retrieval and modification
CVE-2025-30036
CC
CGM CLININET
CGM
8.8
0%
Aug 27Stored XSS permitting session takeover of arbitrary user
CVE-2025-2313
CC
CGM CLININET
CGM
9.4
0%
Aug 27RCE via Print.pl in uhcPrintServerPrint