PT-2026-67899

Name of the Vulnerable Software and Affected Versions ESAFENET CDG versions prior to 20260615 Description A remote SQL injection is possible due to improper handling of the keyid argument within an unknown function of the /CDGServer3/ukey/usbkey;logindojojs file. SQL injection is a technique wher...

PT-2025-13804

Name of the Vulnerable Software and Affected Versions ESAFENET CDG version 3 Description A critical issue was found in the software, affecting an unknown function of the file /CDGServer3/UserAjax. The manipulation of the Username argument leads to SQL injection. It is possible to launch the attac...

PT-2025-9234

Name of the Vulnerable Software and Affected Versions ESAFENET CDG version 5.6.3.154.205 Description A critical vulnerability has been found in ESAFENET CDG, affecting an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the startDate and endDate arguments...

CVE-2024-9560

CVE-2024-9560 affects ESAFENET CDG V5. The vulnerable component is the delCatelogs function in /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs, where manipulating the argument id leads to SQL injection. Multiple sources confirm remote exploitability and public disclosure, with CVSS ...

CVE-2019-9632

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...

CVE-2019-9632

CVE-2019-9632 affects ESAFENET CDG V3 and V5. The vulnerability enables arbitrary file download via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request. Reported impact is information disclosure; CVSSv3 base score 7.5 (HI...

PT-2019-19766

Name of the Vulnerable Software and Affected Versions ESAFENET CDG versions V3 and V5 Description The issue concerns an arbitrary file download vulnerability. It can be exploited via the fileName parameter in the "download.jsp" endpoint, specifically when the InstallationPack parameter is...

CVE-2019-9632: Undefined Security Weakness

ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request...