Lucene search
+L

499 matches found

Cvelist
Cvelist
•added 2025/01/28 10:00 p.m.•33 views

CVE-2025-0786 ESAFENET CDG appDetail.jsp sql injection

A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

6.5CVSS0.00414EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/01/28 10:00 p.m.•15 views

CVE-2025-0786 ESAFENET CDG appDetail.jsp sql injection

A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

6.5CVSS6.8AI score0.00414EPSS
SaveExploits0References4
CVE
CVE
•added 2025/01/28 10:00 p.m.•77 views

CVE-2025-0786

CVE-2025-0786 affects ESAFENET CDG V5. The vulnerability resides in the /appDetail.jsp function (parameter flowId) and leads to SQL injection. Exploitation is possible remotely, with public disclosure and no confirmed vendor remediation in the provided documents. Multiple sources corroborate the ...

8.8CVSS7.4AI score0.00414EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2025/01/28 9:31 p.m.•36 views

CVE-2025-0785 ESAFENET CDG SysConfig.jsp cross site scripting

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

5.3CVSS0.00331EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/01/28 9:31 p.m.•15 views

CVE-2025-0785 ESAFENET CDG SysConfig.jsp cross site scripting

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

5.3CVSS3.7AI score0.00331EPSS
SaveExploits0References4
CVE
CVE
•added 2025/01/28 9:31 p.m.•86 views

CVE-2025-0785

Summary: CVE-2025-0785 affects ESAFENET CDG V5, specifically the /SysConfig.jsp file where the user-supplied parameter likely named “help” can be manipulated to trigger cross-site scripting (XSS). The root cause is improper sanitization/handling of the argument, enabling an attacker to inject exe...

6.1CVSS6.3AI score0.00331EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•16 views

PT-2025-4047 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A vulnerability was found in an unknown functionality of the file /appDetail.jsp. The manipulation of the curpage argument leads to cross site scripting. The attack can be launched remotely. The vendor was contact...

5.4CVSS3.5AI score0.00306EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•0 views

CVE-2025-0789: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

8.8CVSS5.5AI score0.00508EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•13 views

PT-2025-4046 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue has been found in ESAFENET CDG V5, affecting an unknown function of the file /appDetail.jsp. The manipulation of the flowId argument leads to SQL injection. It is possible to launch the attack...

8.8CVSS6.8AI score0.00414EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•1 views

CVE-2025-0787: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in ESAFENET CDG V5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /appDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be launched remotely. The exploit has be...

5.4CVSS3.9AI score0.00306EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•11 views

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from China EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter curpage in the file /appDetail.jsp that can lead to cross-site scripting...

5.4CVSS4.4AI score0.00306EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•12 views

PT-2025-4045 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version V5 Description: A vulnerability was found in ESAFENET CDG V5, classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross-site...

6.1CVSS3.7AI score0.00331EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•1 views

CVE-2025-0786: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

8.8CVSS5.5AI score0.00414EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•12 views

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /doneDetail.jsp that can lead to SQL injection...

8.8CVSS6.8AI score0.00508EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•12 views

PT-2025-4048 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue affects some unknown functionality of the file /content top.jsp. The manipulation of the id argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to...

8.8CVSS6.9AI score0.00414EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•0 views

CVE-2025-0785: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the publi...

6.1CVSS3.9AI score0.00331EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•14 views

PT-2025-4050 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A problematic issue was found in ESAFENET CDG V5, affecting unknown code of the file "doneDetail.jsp". The manipulation of the curpage argument leads to cross site scripting. The attack can be initiated remotely...

6.1CVSS3.6AI score0.00379EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•19 views

PT-2025-4049 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical vulnerability has been found in ESAFENET CDG V5, affecting an unknown part of the file /doneDetail.jsp. The manipulation of the flowId argument leads to SQL injection. It is possible to initiate the...

8.8CVSS6.9AI score0.00508EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•12 views

PT-2025-4051 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue has been found in ESAFENET CDG V5, affecting some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the flowId argument leads to SQL injection. The attack may be initiated...

9.8CVSS6.8AI score0.00532EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•0 views

CVE-2025-0788: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /contenttop.jsp. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...

8.8CVSS5.5AI score0.00414EPSS
SaveExploits0References1
Rows per page
Query Builder