Clickjacking Vulnerability in CGM CLININET Application
CVE-2025-58405

5.3MEDIUM

Key Information:

Vendor

Cgm

Status
Cgm Clininet
Vendor
CVE Published:
2 March 2026

What is CVE-2025-58405?

The CGM CLININET application is susceptible to clickjacking due to the absence of protective mechanisms such as HTTP security headers or HTML-based frame-busting features. Attackers can exploit this vulnerability by embedding the application in a malicious IFRAME, misleading users into executing unintended actions. This can lead to serious security risks, including potential circumvention of CSRF/XSRF protections, jeopardizing user data and application integrity.

Affected Version(s)

CGM CLININET 0 < 2025.MS3

References

https://cert.pl/en/posts/2026/03/CVE-2025-10350/
third-party-advisory
https://www.cgm.com/pol_pl/products/szpital/cgm-clininet....
product

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.