CVE-2025-58405: Lack of protection mechanisms against Clickjacking attacks
The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protections were detected. As a result, an attacker can embed the application inside a maliciously crafted IFRAME and trick users into performing unintended actions, including potentially bypassing CSRF/XSRF defenses.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58405?
CVE-2025-58405 is considered a medium severity vulnerability due to its potential exploitation for clickjacking attacks.
How do I fix CVE-2025-58405?
To fix CVE-2025-58405, implement appropriate HTTP security headers like 'X-Frame-Options' or use frame-busting techniques in the CGM CLININET application.
What are the potential impacts of CVE-2025-58405?
The potential impacts of CVE-2025-58405 include unauthorized actions taken by users without their knowledge, leading to data theft or compromised user sessions.
Who is affected by CVE-2025-58405?
Organizations using the CGM CLININET application are affected by CVE-2025-58405 due to the lack of clickjacking protection mechanisms.
Is CVE-2025-58405 being actively exploited?
As of now, there have been no confirmed active exploits reported for CVE-2025-58405, but organizations should take immediate action to mitigate the risk.