Lucene search
+L

361 matches found

RedhatCVE
RedhatCVE
added 2025/04/02 4:55 p.m.22 views

CVE-2025-3003

A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the file /CDGServer3/UserAjax. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.5CVSS7.5AI score0.00301EPSS
Exploits0References1
NVD
NVD
added 2025/03/31 5:15 p.m.15 views

CVE-2025-3003

A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the file /CDGServer3/UserAjax. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.5CVSS0.00301EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/31 4:31 p.m.8 views

CVE-2025-3003 ESAFENET CDG UserAjax sql injection

A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the file /CDGServer3/UserAjax. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.5CVSS7.2AI score0.00301EPSS
Exploits0References4
CVE
CVE
added 2025/03/31 4:31 p.m.62 views

CVE-2025-3003

ESAFENET CDG 3 is affected by a SQL injection vulnerability in an unknown function of the file /CDGServer3/UserAjax, caused by manipulation of the Username parameter. The vulnerability can be exploited remotely; disclosures exist and public exploitation is possible. All sources consistently descr...

6.5CVSS6.7AI score0.00301EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/03/31 4:31 p.m.27 views

CVE-2025-3003 ESAFENET CDG UserAjax sql injection

A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the file /CDGServer3/UserAjax. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.5CVSS0.00301EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.4 views

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version 3, which stems from an incorrect operation of the parameter Username that can lead to SQL injection...

6.5CVSS6.9AI score0.00301EPSS
Exploits0References1
NVD
NVD
added 2025/03/28 9:15 p.m.10 views

CVE-2025-2927

A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been classified as critical. Affected is an unknown function of the file /parameter/getFileTypeList.jsp. The manipulation of the argument typename leads to sql injection. It is possible to launch the attack remotely. The exploit has...

9.8CVSS0.00574EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/03/28 8:31 p.m.33 views

CVE-2025-2927 ESAFENET CDG getFileTypeList.jsp sql injection

A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been classified as critical. Affected is an unknown function of the file /parameter/getFileTypeList.jsp. The manipulation of the argument typename leads to sql injection. It is possible to launch the attack remotely. The exploit has...

7.5CVSS0.00574EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/03/28 8:31 p.m.12 views

CVE-2025-2927 ESAFENET CDG getFileTypeList.jsp sql injection

A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been classified as critical. Affected is an unknown function of the file /parameter/getFileTypeList.jsp. The manipulation of the argument typename leads to sql injection. It is possible to launch the attack remotely. The exploit has...

7.5CVSS7.2AI score0.00574EPSS
Exploits1References4
CVE
CVE
added 2025/03/28 8:31 p.m.101 views

CVE-2025-2927

CVE-2025-2927 affects ESAFENET CDG 5.6.3.154.205. The vulnerability is an SQL injection in the unknown function handling the file path /parameter/getFileTypeList.jsp, triggered by manipulating the typename parameter. It is exploitable remotely and cited as critical based on multiple sources. Expl...

9.8CVSS7.4AI score0.00574EPSS
Exploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/05 12:51 a.m.12 views

CVE-2025-1841

A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS7.3AI score0.00439EPSS
Exploits0References1
OSV
OSV
added 2025/03/03 2:15 a.m.8 views

CVE-2025-1844

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.20520250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack...

9.8CVSS5.7AI score0.00398EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/03/03 1:31 a.m.22 views

CVE-2025-1844 ESAFENET CDG backupLogDetail.jsp sql injection

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.20520250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack...

6.5CVSS0.00398EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/03 1:31 a.m.10 views

CVE-2025-1844 ESAFENET CDG backupLogDetail.jsp sql injection

A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.20520250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack...

6.5CVSS6.8AI score0.00398EPSS
Exploits0References4
CVE
CVE
added 2025/03/03 1:31 a.m.64 views

CVE-2025-1844

CVE-2025-1844 affects ESAFENET CDG 5.6.3.154.205_20250114. The flaw is a SQL injection in the file /CDGServer3/logManagement/backupLogDetail.jsp, caused by manipulating the logTaskId parameter. It is remotely exploitable over the network, with public exploit disclosure noted in the sources. The v...

9.8CVSS6.8AI score0.00398EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/03/03 12:15 a.m.7 views

CVE-2025-1841

A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS5.7AI score0.00439EPSS
Exploits0References4
NVD
NVD
added 2025/03/03 12:15 a.m.13 views

CVE-2025-1841

A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS0.00439EPSS
Exploits0References4
OSV
OSV
added 2025/03/03 12:15 a.m.7 views

CVE-2025-1840

A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched...

9.8CVSS5.8AI score0.00456EPSS
Exploits0References4
NVD
NVD
added 2025/03/03 12:15 a.m.16 views

CVE-2025-1840

A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched...

9.8CVSS0.00456EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/03 12:0 a.m.9 views

CVE-2025-1841 ESAFENET CDG ClientSortLog.jsp sql injection

A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS7.6AI score0.00439EPSS
Exploits0References4
Rows per page
Query Builder