PatchTheCVEclininet vulnerabilities and fixes
Recent CVEs affecting clininet, with upgrade or downgrade steps. 4 tracked.
clininet has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-03-02. Highest priority: CVE-2025-58402 (score 34/100).
- CVE-2025-58406 MEDIUM 4.3 UPGRADE The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side at
- CVE-2025-58405 MEDIUM 6.1 UPGRADE The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP
- CVE-2025-58402 HIGH 7.5 UPGRADE The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorizati
- CVE-2025-30042 HIGH 7.8 UPGRADE The CGM CLININET system provides smart card authentication; however, authentication is conducted locally on th
FAQ
How do I fix clininet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is clininet being exploited right now?
None of the tracked clininet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which clininet CVE should I patch first?
CVE-2025-58402 currently ranks highest (34/100): The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorizati.