Lucene search
+L

21 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 11:41 a.m.•12 views

CVE-2025-0791

A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

9.8CVSS9.7AI score0.00532EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•0 views

CVE-2025-1840: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched...

9.8CVSS7AI score0.00509EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/02 12:00 a.m.•16 views

PT-2025-9233 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5.6.3.154.205 Description: A critical issue affects some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the flowId argument leads to SQL injection. The attack may b...

9.8CVSS8.1AI score0.00509EPSS
SaveExploits0References13
OSV
OSV
•added 2025/01/29 1:15 a.m.•14 views

CVE-2025-0793

A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /todoDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS5.7AI score0.00607EPSS
SaveExploits1References4
OSV
OSV
•added 2025/01/29 12:15 a.m.•13 views

CVE-2025-0792

A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

9.8CVSS6.4AI score0.00532EPSS
SaveExploits1References4
CVE
CVE
•added 2025/01/29 12:00 a.m.•84 views

CVE-2025-0792

ESAFENET CDG V5 is affected by a SQL injection vulnerability in the /sdTodoDetail.jsp file, triggered by manipulating the flowId parameter. The issue is exploitable remotely and has public disclosure. Multiple sources confirm the vulnerability but do not provide vendor response or an official pat...

9.8CVSS6.8AI score0.00532EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2025/01/29 12:00 a.m.•14 views

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /todoDetail.jsp that can lead to SQL injection...

9.8CVSS6.8AI score0.00607EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/01/29 12:00 a.m.•16 views

PT-2025-4055 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version V5 Description: A problem was found in ESAFENET CDG, affecting an unknown part of the file /todolistjump.jsp. The manipulation of the flowId argument leads to cross-site scripting. It is possible to initiate the attack...

6.1CVSS3.7AI score0.00433EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/29 12:00 a.m.•1 views

CVE-2025-0791: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

9.8CVSS5.5AI score0.00532EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/29 12:00 a.m.•1 views

CVE-2025-0792: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...

9.8CVSS5.5AI score0.00532EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/29 12:00 a.m.•10 views

EsafeNet CDG 代码注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. A code injection vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /todolistjump.jsp that can lead to cross-site scripting...

6.1CVSS4.8AI score0.00433EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/01/29 12:00 a.m.•15 views

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /sdTodoDetail.jsp that can lead to SQL injection...

9.8CVSS6.8AI score0.00532EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/29 12:00 a.m.•1 views

CVE-2025-0795: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in ESAFENET CDG V5. It has been classified as problematic. This affects an unknown part of the file /todolistjump.jsp. The manipulation of the argument flowId leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to...

6.1CVSS4AI score0.00433EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/29 12:00 a.m.•1 views

CVE-2025-0793: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /todoDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS5.5AI score0.00607EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/28 11:15 p.m.•18 views

CVE-2025-0789

A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

8.8CVSS5.7AI score0.00508EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•0 views

CVE-2025-0789: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

8.8CVSS5.5AI score0.00508EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•12 views

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /doneDetail.jsp that can lead to SQL injection...

8.8CVSS6.8AI score0.00508EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•1 views

CVE-2025-0786: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

8.8CVSS5.5AI score0.00414EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/28 12:00 a.m.•12 views

PT-2025-4051 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue has been found in ESAFENET CDG V5, affecting some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the flowId argument leads to SQL injection. The attack may be initiated...

9.8CVSS6.8AI score0.00532EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•11 views

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which originates from the parameter flowId in the file /appDetail.jsp that can lead to SQL injection...

8.8CVSS6.8AI score0.00414EPSS
SaveExploits0References4
Rows per page
Query Builder