Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-58406

Lack of HTTP Response Headers

Description

The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CGM CGM CLININET

Default version status: unaffected

  • 0 to < 2025.MS3affected

References