gim vulnerabilities and fixes

Recent CVEs affecting gim, with upgrade or downgrade steps. 17 tracked.

gim has 17 tracked vulnerabilities, 10 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-12-02. Highest priority: CVE-2025-40625 (score 53/100).

• CVE-2025-41013 CRITICAL 9.8 UPGRADE SQL injection vulnerability in TCMAN GIM v11 in version 20250304
• CVE-2025-41014 HIGH 7.5 UPGRADE User Enumeration Vulnerability in TCMAN GIM v11 version 20250304
• CVE-2025-41015 HIGH 7.5 UPGRADE User Enumeration Vulnerability in TCMAN GIM v11 version 20250304
• CVE-2025-41012 MEDIUM 5.3 UPGRADE Unauthorized access vulnerability in TCMAN GIM v11 version 20250304
• CVE-2025-40670 HIGH 8.8 DOWNGRADE Incorrect authorization vulnerability in TCMAN's GIM v11
• CVE-2025-40669 MEDIUM 6.5 DOWNGRADE Incorrect authorization vulnerability in TCMAN's GIM v11
• CVE-2025-40668 MEDIUM 6.5 DOWNGRADE Incorrect authorization vulnerability in TCMAN's GIM v11
• CVE-2025-40667 MEDIUM 6.5 DOWNGRADE Missing authorization vulnerability in TCMAN's GIM v11
• CVE-2025-40666 CRITICAL 9.8 DOWNGRADE Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11
• CVE-2025-40665 CRITICAL 9.8 DOWNGRADE Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11
• CVE-2025-40664 CRITICAL 9.1 DOWNGRADE Missing authentication vulnerability in TCMAN GIM v11
• CVE-2025-40625 CRITICAL 9.8 DOWNGRADE Unrestricted file upload in TCMAN's GIM v11
• CVE-2025-40624 CRITICAL 9.8 DOWNGRADE SQL injection in TCMAN's GIM v11
• CVE-2025-40623 CRITICAL 9.8 DOWNGRADE SQL injection in TCMAN's GIM v11
• CVE-2025-40622 CRITICAL 9.8 DOWNGRADE SQL injection in TCMAN's GIM v11
• CVE-2025-40621 CRITICAL 9.8 DOWNGRADE SQL injection in TCMAN's GIM v11
• CVE-2025-40620 CRITICAL 9.8 DOWNGRADE SQL injection in TCMAN's GIM v11

FAQ

How do I fix gim vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is gim being exploited right now?

None of the tracked gim CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which gim CVE should I patch first?

CVE-2025-40625 currently ranks highest (53/100): Unrestricted file upload in TCMAN's GIM v11.

RSS feed for gim · ← Back to latest CVEs