CGM records
4 published records for vendor cgm.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames1
- CWE-603 Use of Client-Side Authentication1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-693 Protection Mechanism Failure1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2025-30042No exploit | Session generation possible with certificate number onlycgm · clininet · CWE-603 | Critical9.0 | — | 0.0% | Mar 2, 2026 |
28Monitor | CVE-2025-58402No exploit | Insecure Direct Object Reference Message IDcgm · clininet · CWE-639 | High7.1 | — | 0.2% | Mar 2, 2026 |
21Monitor | CVE-2025-58406No exploit | Lack of HTTP Response Headerscgm · clininet · CWE-693 | Medium5.3 | — | 0.1% | Mar 2, 2026 |
21Monitor | CVE-2025-58405No exploit | Lack of protection mechanisms against Clickjacking attackscgm · clininet · CWE-1021 | Medium5.3 | — | 0.1% | Mar 2, 2026 |
- CVE-2025-3004236Monitor
Session generation possible with certificate number only
CriticalCVSS 9.0No exploitEPSS 0%cgm · clininetMar 2, 2026
- CVE-2025-5840228Monitor
Insecure Direct Object Reference Message ID
HighCVSS 7.1No exploitEPSS 0%cgm · clininetMar 2, 2026
- CVE-2025-5840621Monitor
Lack of HTTP Response Headers
MediumCVSS 5.3No exploitEPSS 0%cgm · clininetMar 2, 2026
- CVE-2025-5840521Monitor
Lack of protection mechanisms against Clickjacking attacks
MediumCVSS 5.3No exploitEPSS 0%cgm · clininetMar 2, 2026