Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: CGM CLININET 2026.MS3 Clear all filters
TI-2025-43971 CVE-2025-30051 · GHSA-6j7m-7j95-73q6

Insecure file permissions expose credentials in CGM CLININET

Priority LOW 29

The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00098 Published 2026-10-23 Fixed in 2026.MS3 CWE-732
TI-2025-43970 CVE-2025-30050 · GHSA-cwv2-4c7h-2v4g

Code injection in CGM CLININET allows remote code execution

Priority MEDIUM 42

CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data provided by the user.

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.00222 Published 2026-10-23 Fixed in 2026.MS3 CWE-94