CVE-2025-58405: Cgm Clininet

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protections were detected. As a result, an attacker can embed the application inside a maliciously crafted IFRAME and trick users into performing unintended actions, including potentially bypassing CSRF/XSRF defenses.

Affected products

• Cgm Clininet: before 2025.ms3 (fixed in 2025.ms3)

Published 2026-03-02. Last modified 2026-06-17.