CGM vulnerabilities
36 CVEs and advisories name CGM as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-30040Missing authentication in API returning request logs containing session IDs
- CVE-2025-30039Missing authentication in API returning a list of all active sessions
- CVE-2025-30038Session ID leakage in Zone.Identifier of downloaded files
- CVE-2025-30037Missing authentication in APIs allowing data retrieval and modification
- CVE-2025-30036Stored XSS permitting session takeover of arbitrary user
- CVE-2025-2313RCE via Print.pl in uhcPrintServerPrint