How many CVEs does CGM have?

CGM has 25 published CVE records since 2025, including 25 in the last two years.

How many CGM CVEs are in CISA KEV?

None of CGM's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which CGM products have the most CVEs?

The CGM products with the most published CVEs are CGM CLININET, clininet, CGM NETRAAD.

What are the most common weakness types in CGM CVEs?

CGM's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-306 (Missing Authentication for Critical Function), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-639 (Authorization Bypass Through User-Controlled Key).

Are there public exploits for CGM vulnerabilities?

No CGM CVEs currently have a tracked public exploit in this dataset.

How many critical CGM vulnerabilities are there?

CGM has 11 critical and 6 high-severity CVEs.

What is the average severity of CGM CVEs?

The average CVSS base score across CGM's scored CVEs is 8.0.

RadicalNotion.AI

Log in Create an account

25 CVEs

CGM Vulnerabilities

Name: CGM vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for CGM.

25

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.0

Avg CVSS

2025–2026

Overview

CGM has 25 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

Security scorecard

A quick read on CGM's vulnerability posture, as a share of its 25 published CVEs.

Average CVSS: 8.0
Critical / high: 68%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 100%

Severity and exploitation

How the CVSS severity of CGM's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical11

High6

Medium8

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of CGM's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No CGM CVEs currently have a tracked public exploit.

Most affected products

The CGM products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in CGM CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish CGM CVE records.

CERT-PL25 CVEs

Disclosure activity by year

How many CGM CVEs were published each year.

2025

17

2026

8

Latest CGM CVEs

The most recently disclosed vulnerabilities affecting CGM.

Lack of HTTP Response Headers
CWE-693
Medium · CVSS 5.3
EPSS 0.2%2026-03-02
Lack of protection mechanisms against Clickjacking attacks
CWE-1021
Medium · CVSS 5.3
EPSS 0.2%2026-03-02
Insecure Direct Object Reference Message ID
CWE-639
High · CVSS 7.1
EPSS 0.2%2026-03-02
SQL injection in CheckUnitCodeAndKey.pl
CWE-89
Medium · CVSS 6.9
EPSS 0.2%2026-03-02
RCE on uhcapache user permissions
CWE-78
Critical · CVSS 9.4
EPSS 0.6%2026-03-02
Session generation possible with certificate number only
CWE-603
Critical · CVSS 9.0
EPSS 0.1%2026-03-02
Lack of API authentication allowing session generation for any user
CWE-306
Critical · CVSS 9.0
EPSS 0.3%2026-03-02
SQL injection in CGM NETRAAD
CWE-89
High · CVSS 8.8
EPSS 0.2%2026-03-02
Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key
CWE-912
High · CVSS 8.8
EPSS 0.1%2025-08-27
Excessive permissions on configuration files containing database logins and passwords
CWE-732
Critical · CVSS 9.4
EPSS 0.1%2025-08-27
SQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameter
CWE-89
Medium · CVSS 6.9
EPSS 0.2%2025-08-27
SQL injection in ReturnUserUnitsXML.pl via the UserID parameter
CWE-89
Medium · CVSS 6.9
EPSS 0.2%2025-08-27

Get an alert for each new CGM CVE, with AI-written analysis and remediation steps.

Monitor CGM CVEs

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about CGM vulnerabilities.

How many CVEs does CGM have?: CGM has 25 published CVE records since 2025, including 25 in the last two years.
How many CGM CVEs are in CISA KEV?: None of CGM's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which CGM products have the most CVEs?: The CGM products with the most published CVEs are CGM CLININET, clininet, CGM NETRAAD.
What are the most common weakness types in CGM CVEs?: CGM's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-306 (Missing Authentication for Critical Function), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-639 (Authorization Bypass Through User-Controlled Key).
Are there public exploits for CGM vulnerabilities?: No CGM CVEs currently have a tracked public exploit in this dataset.
How many critical CGM vulnerabilities are there?: CGM has 11 critical and 6 high-severity CVEs.
What is the average severity of CGM CVEs?: The average CVSS base score across CGM's scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track CGM vulnerabilities

Get an alert for each new CGM CVE, with AI-written analysis and remediation steps.

Create an account See pricing