Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-30055 1 Cgm 1 Clininet 2025-08-29 N/A
The "system" function receives untrusted input from the user. If the "EnableJSCaching" option is enabled, it is possible to execute arbitrary code provided as the "Module" parameter.
CVE-2025-30059 1 Cgm 1 Cgm Clininet 2025-08-29 N/A
In the PrepareCDExportJSON.pl service, the "getPerfServiceIds" function is vulnerable to SQL injection.