Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-30037

Missing authentication in APIs allowing data retrieval and modification

Description

The system exposes several endpoints, typically including "/int/" in their path, that should be restricted to internal services, but are instead publicly accessible without authentication to any host able to reach the application server on port 443/tcp.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CGM CGM CLININET

Default version status: unaffected

  • 0 to < 2025.MS2affected

References