Known Vulnerabilities for CGM CLININET by CGM

Listed below are 10 of the newest known vulnerabilities associated with "CGM CLININET" by "CGM".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2025-58403 json CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data. A re... Not Provided 2026-10-23 2026-10-23
CVE-2025-30054 json CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root pri... Not Provided 2026-10-23 2026-10-23
CVE-2025-30053 json The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. T... Not Provided 2026-10-23 2026-10-23
CVE-2025-30052 json The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely... Not Provided 2026-10-23 2026-10-23
CVE-2025-30051 json The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in th... Not Provided 2026-10-23 2026-10-23
CVE-2025-30050 json CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a ... Not Provided 2026-10-23 2026-10-23
CVE-2025-30049 json The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 20... Not Provided 2026-10-23 2026-10-23
CVE-2025-30047 json CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-b... Not Provided 2026-10-23 2026-10-23
CVE-2025-30046 json In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with r... Not Provided 2026-10-23 2026-10-23
CVE-2025-30045 json CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF document con... Not Provided 2026-10-23 2026-10-23

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report