Known Vulnerabilities for CGM CLININET by CGM
Listed below are 10 of the newest known vulnerabilities associated with "CGM CLININET" by "CGM".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-58403 json | CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data. A re... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2025-30054 json | CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root pri... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2025-30053 json | The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. T... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2025-30052 json | The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2025-30051 json | The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in th... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2025-30050 json | CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a ... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2025-30049 json | The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 20... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2025-30047 json | CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-b... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2025-30046 json | In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with r... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2025-30045 json | CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF document con... | Not Provided | 2026-10-23 | 2026-10-23 |