CVE-2025-58406 — Lack of HTTP Response Headers
The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cro…
Published: 2026-03-02 · CVSS: 5.3 · CVSS 4.0
The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7