{"schema_version":1,"title":"CGM CLININET vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in CGM CLININET: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2025-58403, was published on 23 October 2026. 11 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/clininet","json_url":"https://junglewise.ai/threats/technologies/clininet.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/clininet","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":0,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":11,"last_90_days":11,"last_365_days":11},"latest":[{"cve":"CVE-2025-58403","slug":"cve-2025-58403-cgm-clininet-is-vulnerable-to-reflected-cross-site-scripting-xss","title":"CGM CLININET reflected cross-site scripting (XSS)","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:05.417+00:00","url":"https://junglewise.ai/threats/cve-2025-58403-cgm-clininet-is-vulnerable-to-reflected-cross-site-scripting-xss"},{"cve":"CVE-2025-30054","slug":"cve-2025-30054-cgm-clininet-is-vulnerable-to-local-privilege-escalation-the","title":"CGM CLININET privilege escalation in HL7 message processing","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:05.29+00:00","url":"https://junglewise.ai/threats/cve-2025-30054-cgm-clininet-is-vulnerable-to-local-privilege-escalation-the"},{"cve":"CVE-2025-30053","slug":"cve-2025-30053-the-cgm-clininet-application-runs-the-cgm-updater-process","title":"CGM CLININET cgm-updater missing authentication on open port","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:05.17+00:00","url":"https://junglewise.ai/threats/cve-2025-30053-the-cgm-clininet-application-runs-the-cgm-updater-process"},{"cve":"CVE-2025-30052","slug":"cve-2025-30052-the-rsyncd-service-of-the-cgm-clininet-is-vulnerable-to","title":"CGM CLININET rsyncd authentication bypass via IP spoofing","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:05.04+00:00","url":"https://junglewise.ai/threats/cve-2025-30052-the-rsyncd-service-of-the-cgm-clininet-is-vulnerable-to"},{"cve":"CVE-2025-30051","slug":"cve-2025-30051-the-cgm-clininet-application-stores-the-production-database-login","title":"CGM CLININET insecure file permissions expose database credentials","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.923+00:00","url":"https://junglewise.ai/threats/cve-2025-30051-the-cgm-clininet-application-stores-the-production-database-login"},{"cve":"CVE-2025-30050","slug":"cve-2025-30050-cgm-clininet-is-vulnerable-to-code-injection-in-the-runcgi-pm","title":"CGM CLININET code injection in RunCGI.pm","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.81+00:00","url":"https://junglewise.ai/threats/cve-2025-30050-cgm-clininet-is-vulnerable-to-code-injection-in-the-runcgi-pm"},{"cve":"CVE-2025-30049","slug":"cve-2025-30049-the-cgm-clininet-application-stores-user-passwords-as-unsalted","title":"CGM CLININET weak password hashing using MD5","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.69+00:00","url":"https://junglewise.ai/threats/cve-2025-30049-the-cgm-clininet-application-stores-user-passwords-as-unsalted"},{"cve":"CVE-2025-30047","slug":"cve-2025-30047-cgm-clininet-is-vulnerable-to-remote-code-execution-caused-by","title":"CGM CLININET unsafe Java deserialization remote code execution","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.573+00:00","url":"https://junglewise.ai/threats/cve-2025-30047-cgm-clininet-is-vulnerable-to-remote-code-execution-caused-by"},{"cve":"CVE-2025-30046","slug":"cve-2025-30046-in-the-cgm-clininet-application-server-multiple-processes","title":"CGM CLININET privileged code execution in HL7 handler","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.45+00:00","url":"https://junglewise.ai/threats/cve-2025-30046-in-the-cgm-clininet-application-server-multiple-processes"},{"cve":"CVE-2025-30045","slug":"cve-2025-30045-cgm-clininet-is-vulnerable-to-code-injection-in-the-convexpr","title":"CGM CLININET code injection in ConvExpr function","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.327+00:00","url":"https://junglewise.ai/threats/cve-2025-30045-cgm-clininet-is-vulnerable-to-code-injection-in-the-convexpr"},{"cve":"CVE-2025-30043","slug":"cve-2025-30043-cgm-clininet-is-vulnerable-to-missing-authentication-for-critical","title":"CGM CLININET missing authentication in /DocManagment path","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:03.3+00:00","url":"https://junglewise.ai/threats/cve-2025-30043-cgm-clininet-is-vulnerable-to-missing-authentication-for-critical"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"CGM CLININET","slug":"clininet","vendor":{"hub":true,"name":"CGM","slug":"cgm","url":"https://junglewise.ai/threats/vendors/cgm"},"aliases":[],"category":"hospital-information-system","description":"CLININET is a hospital information system developed by CGM.","url":"https://junglewise.ai/threats/technologies/clininet"},"most_severe":[{"cve":"CVE-2025-58403","slug":"cve-2025-58403-cgm-clininet-is-vulnerable-to-reflected-cross-site-scripting-xss","title":"CGM CLININET reflected cross-site scripting (XSS)","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:05.417+00:00","url":"https://junglewise.ai/threats/cve-2025-58403-cgm-clininet-is-vulnerable-to-reflected-cross-site-scripting-xss"},{"cve":"CVE-2025-30054","slug":"cve-2025-30054-cgm-clininet-is-vulnerable-to-local-privilege-escalation-the","title":"CGM CLININET privilege escalation in HL7 message processing","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:05.29+00:00","url":"https://junglewise.ai/threats/cve-2025-30054-cgm-clininet-is-vulnerable-to-local-privilege-escalation-the"},{"cve":"CVE-2025-30053","slug":"cve-2025-30053-the-cgm-clininet-application-runs-the-cgm-updater-process","title":"CGM CLININET cgm-updater missing authentication on open port","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:05.17+00:00","url":"https://junglewise.ai/threats/cve-2025-30053-the-cgm-clininet-application-runs-the-cgm-updater-process"},{"cve":"CVE-2025-30052","slug":"cve-2025-30052-the-rsyncd-service-of-the-cgm-clininet-is-vulnerable-to","title":"CGM CLININET rsyncd authentication bypass via IP spoofing","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:05.04+00:00","url":"https://junglewise.ai/threats/cve-2025-30052-the-rsyncd-service-of-the-cgm-clininet-is-vulnerable-to"},{"cve":"CVE-2025-30051","slug":"cve-2025-30051-the-cgm-clininet-application-stores-the-production-database-login","title":"CGM CLININET insecure file permissions expose database credentials","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.923+00:00","url":"https://junglewise.ai/threats/cve-2025-30051-the-cgm-clininet-application-stores-the-production-database-login"},{"cve":"CVE-2025-30050","slug":"cve-2025-30050-cgm-clininet-is-vulnerable-to-code-injection-in-the-runcgi-pm","title":"CGM CLININET code injection in RunCGI.pm","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.81+00:00","url":"https://junglewise.ai/threats/cve-2025-30050-cgm-clininet-is-vulnerable-to-code-injection-in-the-runcgi-pm"},{"cve":"CVE-2025-30049","slug":"cve-2025-30049-the-cgm-clininet-application-stores-user-passwords-as-unsalted","title":"CGM CLININET weak password hashing using MD5","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.69+00:00","url":"https://junglewise.ai/threats/cve-2025-30049-the-cgm-clininet-application-stores-user-passwords-as-unsalted"},{"cve":"CVE-2025-30047","slug":"cve-2025-30047-cgm-clininet-is-vulnerable-to-remote-code-execution-caused-by","title":"CGM CLININET unsafe Java deserialization remote code execution","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.573+00:00","url":"https://junglewise.ai/threats/cve-2025-30047-cgm-clininet-is-vulnerable-to-remote-code-execution-caused-by"},{"cve":"CVE-2025-30046","slug":"cve-2025-30046-in-the-cgm-clininet-application-server-multiple-processes","title":"CGM CLININET privileged code execution in HL7 handler","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.45+00:00","url":"https://junglewise.ai/threats/cve-2025-30046-in-the-cgm-clininet-application-server-multiple-processes"},{"cve":"CVE-2025-30045","slug":"cve-2025-30045-cgm-clininet-is-vulnerable-to-code-injection-in-the-convexpr","title":"CGM CLININET code injection in ConvExpr function","severity":"info","exploited":false,"published_at":"2026-10-23T09:17:04.327+00:00","url":"https://junglewise.ai/threats/cve-2025-30045-cgm-clininet-is-vulnerable-to-code-injection-in-the-convexpr"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}