agentprime: cgm-clininetEvery new CVE for cgm-clininet.https://agentprime.io/CVE-2025-58403: Reflected Cross-Site Scripting (XSS) in CGM CLININEThttps://agentprime.io/advisories/CVE-2025-58403/https://agentprime.io/advisories/CVE-2025-58403/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:23:44 GMTCVECVE-2025-30054: Local Privilege Escalation in CGM CLININEThttps://agentprime.io/advisories/CVE-2025-30054/https://agentprime.io/advisories/CVE-2025-30054/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:22:59 GMTCVEcriticalCVE-2025-30053: Missing Authentication in CGM CLININEThttps://agentprime.io/advisories/CVE-2025-30053/https://agentprime.io/advisories/CVE-2025-30053/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:22:59 GMTCVECVE-2025-30052: Authentication Bypass via IP Spoofing in CGM CLININET rsyncdhttps://agentprime.io/advisories/CVE-2025-30052/https://agentprime.io/advisories/CVE-2025-30052/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:22:58 GMTCVECVE-2025-30051: Insecure File Permissions in CGM CLININEThttps://agentprime.io/advisories/CVE-2025-30051/https://agentprime.io/advisories/CVE-2025-30051/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:22:57 GMTCVECVE-2025-30050: Remote Code Execution in CGM CLININEThttps://agentprime.io/advisories/CVE-2025-30050/https://agentprime.io/advisories/CVE-2025-30050/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:22:57 GMTCVEcriticalCVE-2025-30049: Use of Unsalted MD5 Password Hashes in CGM CLININEThttps://agentprime.io/advisories/CVE-2025-30049/https://agentprime.io/advisories/CVE-2025-30049/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:22:56 GMTCVECVE-2025-30047: Remote Code Execution via Java Deserialization in CGM CLININEThttps://agentprime.io/advisories/CVE-2025-30047/https://agentprime.io/advisories/CVE-2025-30047/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:22:55 GMTCVEcriticalCVE-2025-30046: Remote Code Execution in CGM CLININEThttps://agentprime.io/advisories/CVE-2025-30046/https://agentprime.io/advisories/CVE-2025-30046/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:22:55 GMTCVEcriticalCVE-2025-30045: Code Injection in CGM CLININEThttps://agentprime.io/advisories/CVE-2025-30045/https://agentprime.io/advisories/CVE-2025-30045/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:22:54 GMTCVECVE-2025-30043: Missing Authentication in CGM CLININEThttps://agentprime.io/advisories/CVE-2025-30043/https://agentprime.io/advisories/CVE-2025-30043/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Oct 2026 08:22:54 GMTCVECVE-2025-58406: Lack of HTTP Response Headershttps://agentprime.io/advisories/CVE-2025-58406/https://agentprime.io/advisories/CVE-2025-58406/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2026 11:16:56 GMTCVECVE-2025-58405: Lack of protection mechanisms against Clickjacking attackshttps://agentprime.io/advisories/CVE-2025-58405/https://agentprime.io/advisories/CVE-2025-58405/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2026 11:16:45 GMTCVECVE-2025-58402: Insecure Direct Object Reference Message IDhttps://agentprime.io/advisories/CVE-2025-58402/https://agentprime.io/advisories/CVE-2025-58402/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2026 11:16:31 GMTCVECVE-2025-30062: SQL injection in CheckUnitCodeAndKey.plhttps://agentprime.io/advisories/CVE-2025-30062/https://agentprime.io/advisories/CVE-2025-30062/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2026 11:16:16 GMTCVECVE-2025-30044: RCE on uhcapache user permissionshttps://agentprime.io/advisories/CVE-2025-30044/https://agentprime.io/advisories/CVE-2025-30044/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2026 11:15:43 GMTCVEcriticalCVE-2025-30042: Session generation possible with certificate number onlyhttps://agentprime.io/advisories/CVE-2025-30042/https://agentprime.io/advisories/CVE-2025-30042/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2026 11:14:46 GMTCVEcriticalCVE-2025-30035: Lack of API authentication allowing session generation for any userhttps://agentprime.io/advisories/CVE-2025-30035/https://agentprime.io/advisories/CVE-2025-30035/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Mar 2026 11:14:05 GMTCVEcriticalCVE-2025-30064: Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT keyhttps://agentprime.io/advisories/CVE-2025-30064/https://agentprime.io/advisories/CVE-2025-30064/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:25:20 GMTCVECVE-2025-30063: Excessive permissions on configuration files containing database logins and passwordshttps://agentprime.io/advisories/CVE-2025-30063/https://agentprime.io/advisories/CVE-2025-30063/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:25:02 GMTCVEcriticalCVE-2025-30061: SQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameterhttps://agentprime.io/advisories/CVE-2025-30061/https://agentprime.io/advisories/CVE-2025-30061/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:24:56 GMTCVECVE-2025-30060: SQL injection in ReturnUserUnitsXML.pl via the UserID parameterhttps://agentprime.io/advisories/CVE-2025-30060/https://agentprime.io/advisories/CVE-2025-30060/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:24:45 GMTCVECVE-2025-30059: Authenticated SQL injection in PrepareCDExportJSON.plhttps://agentprime.io/advisories/CVE-2025-30059/https://agentprime.io/advisories/CVE-2025-30059/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:24:27 GMTCVECVE-2025-30058: SQL injection in getPatientIdentifier function of PatientService.plhttps://agentprime.io/advisories/CVE-2025-30058/https://agentprime.io/advisories/CVE-2025-30058/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:24:03 GMTCVECVE-2025-30057: Authenticated RCE with uhcapache privileges in ConvertToPDFhttps://agentprime.io/advisories/CVE-2025-30057/https://agentprime.io/advisories/CVE-2025-30057/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:23:38 GMTCVEcriticalCVE-2025-30056: Calling system commands via RunCommandhttps://agentprime.io/advisories/CVE-2025-30056/https://agentprime.io/advisories/CVE-2025-30056/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:23:17 GMTCVEcriticalCVE-2025-30055: Conditional RCE via the "system" functionhttps://agentprime.io/advisories/CVE-2025-30055/https://agentprime.io/advisories/CVE-2025-30055/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:22:41 GMTCVEcriticalCVE-2025-30048: Unauthenticated access to module configuration endpointhttps://agentprime.io/advisories/CVE-2025-30048/https://agentprime.io/advisories/CVE-2025-30048/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:22:14 GMTCVECVE-2025-30041: Missing authentication in APIs returning statistical data along with session IDshttps://agentprime.io/advisories/CVE-2025-30041/https://agentprime.io/advisories/CVE-2025-30041/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:21:41 GMTCVEcriticalCVE-2025-30040: Missing authentication in API returning request logs containing session IDshttps://agentprime.io/advisories/CVE-2025-30040/https://agentprime.io/advisories/CVE-2025-30040/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:21:17 GMTCVEcriticalCVE-2025-30039: Missing authentication in API returning a list of all active sessionshttps://agentprime.io/advisories/CVE-2025-30039/https://agentprime.io/advisories/CVE-2025-30039/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:20:57 GMTCVEcriticalCVE-2025-30038: Session ID leakage in Zone.Identifier of downloaded fileshttps://agentprime.io/advisories/CVE-2025-30038/https://agentprime.io/advisories/CVE-2025-30038/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:20:35 GMTCVECVE-2025-30037: Missing authentication in APIs allowing data retrieval and modificationhttps://agentprime.io/advisories/CVE-2025-30037/https://agentprime.io/advisories/CVE-2025-30037/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:20:18 GMTCVECVE-2025-30036: Stored XSS permitting session takeover of arbitrary userhttps://agentprime.io/advisories/CVE-2025-30036/https://agentprime.io/advisories/CVE-2025-30036/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:19:41 GMTCVECVE-2025-2313: RCE via Print.pl in uhcPrintServerPrinthttps://agentprime.io/advisories/CVE-2025-2313/https://agentprime.io/advisories/CVE-2025-2313/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Aug 2025 10:18:51 GMTCVEcritical