CVE-2025-0795 ESAFENET CDG todolistjump.jsp cross site scripting

A vulnerability was found in ESAFENET CDG V5. It has been classified as problematic. This affects an unknown part of the file /todolistjump.jsp. The manipulation of the argument flowId leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2025-0795

CVE-2025-0795 affects ESAFENET CDG V5, where the flowId parameter in /todolistjump.jsp is vulnerable to reflected XSS. The issue potentially allows remote initiation and has publicly disclosed exploit information. Multiple sources (NVD, Red Hat, CVE list, PT Security, CNNVD) corroborate the vulne...

CVE-2025-0794 ESAFENET CDG todoDetail.jsp cross site scripting

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. Affected by this issue is some unknown functionality of the file /todoDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed...

CVE-2025-0794 ESAFENET CDG todoDetail.jsp cross site scripting

A vulnerability was found in ESAFENET CDG V5 and classified as problematic. Affected by this issue is some unknown functionality of the file /todoDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed...

CVE-2025-0794

The CVE-2025-0794 issue affects ESAFENET CDG V5, specifically the /todoDetail.jsp component. The vulnerability arises from unsafely handling the curpage parameter, enabling cross-site scripting (XSS). It can be triggered remotely and has public exploit disclosures, per multiple sources. Red Hat a...

CVE-2025-0793 ESAFENET CDG todoDetail.jsp sql injection

A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /todoDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

CVE-2025-0793

The CVE-2025-0793 entry concerns ESAFENET CDG V5. Affected component: the JSP file /todoDetail.jsp. Root cause: manipulation of the flowId parameter leads to SQL injection. Impact includes potential confidential data exposure, data integrity issues, and availability disruption; CVSS notes range f...

CVE-2025-0793 ESAFENET CDG todoDetail.jsp sql injection

A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /todoDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

CVE-2025-0792

A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-0792

A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-0791

A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2025-0790

A vulnerability classified as problematic was found in ESAFENET CDG V5. This vulnerability affects unknown code of the file /doneDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-0791

A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

CVE-2025-0792

ESAFENET CDG V5 is affected by a SQL injection vulnerability in the /sdTodoDetail.jsp file, triggered by manipulating the flowId parameter. The issue is exploitable remotely and has public disclosure. Multiple sources confirm the vulnerability but do not provide vendor response or an official pat...

CVE-2025-0792 ESAFENET CDG sdTodoDetail.jsp sql injection

A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

CVE-2025-0792 ESAFENET CDG sdTodoDetail.jsp sql injection

A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

PT-2025-4055 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version V5 Description: A problem was found in ESAFENET CDG, affecting an unknown part of the file /todolistjump.jsp. The manipulation of the flowId argument leads to cross-site scripting. It is possible to initiate the attack...

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /todoDetail.jsp that can lead to SQL injection...

EsafeNet CDG 代码注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. A code injection vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /todolistjump.jsp that can lead to cross-site scripting...

PT-2025-4052 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue was found in an unknown function of the file /sdTodoDetail.jsp, where the manipulation of the flowId argument leads to SQL injection. It is possible to launch the attack remotely. The exploit has...