CVE-2025-58406: Lack of HTTP Response Headers
The CGM CLININET application respond without essential security HTTP headers, exposing users to client‑side attacks such as clickjacking, MIME sniffing, unsafe caching, weak cross‑origin isolation, and missing transport security controls.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58406?
CVE-2025-58406 is considered a medium severity vulnerability due to its potential for client-side attacks.
How do I fix CVE-2025-58406?
To fix CVE-2025-58406, implement essential security HTTP headers in the CGM CLININET application.
What types of attacks are associated with CVE-2025-58406?
CVE-2025-58406 is associated with client-side attacks such as clickjacking, MIME sniffing, and unsafe caching.
Which software is affected by CVE-2025-58406?
CVE-2025-58406 affects the CGM CLININET application versions up to 2025.ms3.
What are the risks of not addressing CVE-2025-58406?
Not addressing CVE-2025-58406 can lead to user data exposure and allow attackers to exploit vulnerabilities in client-side security.