Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: CGM CLININET 2025.MS1 Clear all filters
TI-2025-21412 CVE-2025-30041 · GHSA-wc4p-g368-6p6h

Missing authentication in APIs returning statistical data along with session IDs

Priority MEDIUM 40

The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs.

CVSS 4.0CRITICAL 9.0 Adjacent network No auth No interaction EPSS 0.00176 Published 2025-08-27 Fixed in 2025.MS1 CWE-306
TI-2025-21409 CVE-2025-30038 · GHSA-mpgx-6896-6pg4

Session ID leakage in Zone.Identifier of downloaded files

Priority LOW 33

The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET.

CVSS 4.0HIGH 7.3 Adjacent network High privileges User interaction EPSS 0.00169 Published 2025-08-27 Fixed in 2025.MS1 CWE-1230
TI-2025-02033 CVE-2025-2313 · GHSA-hjhg-jph5-3mxh

RCE via Print.pl in uhcPrintServerPrint

Priority MEDIUM 42

In the Print.pl service, the "uhcPrintServerPrint" function allows execution of arbitrary code via the "CopyCounter" parameter.

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.00247 Published 2025-08-27 Fixed in 2025.MS1 CWE-94