Description (CNA)
The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CGM / CGM CLININET | affected 0 before 2025.MS3 |
CWE
CWE-693
References
- https://cert.pl/en/posts/2026/03/CVE-2025-10350/
- https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html
ADP enrichment
No English description supplied.
No references supplied.