CVE-2025-30041: Cgm Clininet

Critical severity, CVSS 9.0. EPSS: 0.2% chance of exploitation in the next 30 days.

The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs.

Affected products

• Cgm Cgm Clininet: before 2025.MS1 (fixed in 2025.MS1)

Published 2025-08-27. Last modified 2026-06-17.