Cgm Clininet
4 CVEs affecting Cgm Clininet. Latest disclosed: 2026-03-02. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-30042 | High | 7.8 | 2026-03-02 | The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on the client device, and, in reality, only the certif… |
CVE-2025-58402 | High | 7.5 | 2026-03-02 | The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks. By modifying the parameter in the GET… |
CVE-2025-58405 | Medium | 6.1 | 2026-03-02 | The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting pr… |
CVE-2025-58406 | Medium | 4.3 | 2026-03-02 | The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe… |