Filtered by vendor Cgm Subscriptions
Total 22 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-30040 1 Cgm 1 Clininet 2025-08-29 N/A
The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint.
CVE-2025-30059 1 Cgm 1 Cgm Clininet 2025-08-29 N/A
In the PrepareCDExportJSON.pl service, the "getPerfServiceIds" function is vulnerable to SQL injection.