SQL Injection Vulnerability in CGM Clininet by CGM
CVE-2025-30062

6.9MEDIUM

Key Information:

Vendor

Cgm

Status
Cgm Clininet
Vendor
CVE Published:
2 March 2026

What is CVE-2025-30062?

The CGM Clininet product has a vulnerability within its 'CheckUnitCodeAndKey.pl' service, specifically in the 'validateOrgUnit' function, which is susceptible to SQL injection attacks. This vulnerability could allow an attacker to manipulate database queries, potentially leading to unauthorized access to sensitive data. Organizations using affected versions of CGM Clininet should take immediate steps to update their systems and safeguard against potential exploitation.

Affected Version(s)

CGM CLININET 0 < 2025.MS2

References

https://cert.pl/en/posts/2026/03/CVE-2025-10350/
third-party-advisory
https://www.cgm.com/pol_pl/products/szpital/cgm-clininet....
product

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Maciej Kazulak
.