MEDIUM🇵🇱 Wersja polska

CVE-2025-58406

CVSS 5.3v4.0pub. 2026-03-02upd. 2026-03-09

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls.

CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Cgm Clininet

    APP
    Cgm
    < 2025.ms3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-30042CRITICAL9.0PL ✓same product

CGM CLININET: Obejście uwierzytelnienia kartą chipową poprzez sam numer certyfikatu

CVE-2025-58402HIGH7.1same product

The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorizati...

CVE-2025-58405MEDIUM5.3same product

Aplikacja CGM CLININET nie implementuje żadnych mechanizmów zapobiegających atakom clickjacking — nie wykryto ...