CVE-2025-2927

CVE-2025-2927 affects ESAFENET CDG 5.6.3.154.205. The vulnerability is an SQL injection in the unknown function handling the file path /parameter/getFileTypeList.jsp, triggered by manipulating the typename parameter. It is exploitable remotely and cited as critical based on multiple sources. Expl...

CVE-2017-18636

CVE-2017-18636 describes a directory traversal vulnerability in CDG through 2017-01-01, exploitable via downloadDocument.jsp?command=download&pathAndName=. Red Hat and NVD entries corroborate the issue; however, the provided documents do not specify affected products, versions beyond the CDG refe...

CVE-2024-9560

CVE-2024-9560 affects ESAFENET CDG V5. The vulnerable component is the delCatelogs function in /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs, where manipulating the argument id leads to SQL injection. Multiple sources confirm remote exploitability and public disclosure, with CVSS ...

CVE-2024-10660

CVE-2024-10660 affects ESAFENET CDG 5, specifically the deleteHook function in HookService.java. The vulnerability arises from improper handling of the hookId argument, enabling SQL injection. The issue can be exploited remotely, and public disclosures exist. Supported details from connected docs...

CVE-2025-0785

Summary: CVE-2025-0785 affects ESAFENET CDG V5, specifically the /SysConfig.jsp file where the user-supplied parameter likely named “help” can be manipulated to trigger cross-site scripting (XSS). The root cause is improper sanitization/handling of the argument, enabling an attacker to inject exe...

CVE-2025-1840

CVE-2025-1840 affects ESAFENET CDG 5.6.3.154.205. The root cause is improper handling of the flowId parameter in the file /CDGServer3/workflowE/useractivate/updateorg.jsp, which leads to an SQL injection. The vulnerability can be exploited remotely and the exploit has been disclosed publicly, ind...

CVE-2025-0787

CVE-2025-0787 affects ESAFENET CDG V5, specifically the /appDetail.jsp component. The vulnerability arises from manipulating the parameter, enabling cross-site scripting. Public exploitation is reported; the attack can be launched remotely and requires user interaction. No vendor patch details a...

CVE-2025-0792

ESAFENET CDG V5 is affected by a SQL injection vulnerability in the /sdTodoDetail.jsp file, triggered by manipulating the flowId parameter. The issue is exploitable remotely and has public disclosure. Multiple sources confirm the vulnerability but do not provide vendor response or an official pat...

CVE-2024-10069

The CVE-2024-10069 entry applies to ESAFENET CDG 5, specifically the MailDecryptApplicationService.java function actionPassMainApplication. The vulnerability arises from manipulating the id argument, enabling SQL injection. It can be exploited remotely, and publicly disclosed exploits exist. The ...

CVE-2024-10277

CVE-2024-10277 affects ESAFENET CDG 5, specifically the USBKeyAjax.java component. The vulnerability arises from improper handling of the id parameter, enabling SQL injection. Reported as exploitable remotely and described as critical, with public disclosure of an exploit. Connected documents con...

CVE-2025-1844

CVE-2025-1844 affects ESAFENET CDG 5.6.3.154.205_20250114. The flaw is a SQL injection in the file /CDGServer3/logManagement/backupLogDetail.jsp, caused by manipulating the logTaskId parameter. It is remotely exploitable over the network, with public exploit disclosure noted in the sources. The v...

CVE-2024-10500

ESAFENET CDG 5 is affected by a SQL injection in the HookWhiteListService.java file, where manipulating the policyId argument enables remote exploitation. This vulnerability is corroborated across multiple sources (including PT-Security and CVE records) and is described as affecting unknown funct...

CVE-2024-9536

CVE-2024-9536 concerns ESAFENET CDG V5. Affected component: the backend endpoint /MultiServerBackService?path=1, where the fileId argument is injectable. Root cause: unsafeguarded SQL construction allows SQL injection, reported as exploitable remotely. Observed impact: potential unauthorized data...

CVE-2025-0786

CVE-2025-0786 affects ESAFENET CDG V5. The vulnerability resides in the /appDetail.jsp function (parameter flowId) and leads to SQL injection. Exploitation is possible remotely, with public disclosure and no confirmed vendor remediation in the provided documents. Multiple sources corroborate the ...

CVE-2025-1841

CVE-2025-1841 affects ESAFENET CDG 5.6.3.154.205. The vulnerability is in the file /CDGServer3/logManagement/ClientSortLog.jsp, where manipulation of the parameters startDate/endDate causes a SQL injection. It can be exploited remotely, and the exploit has been disclosed publicly. The available c...

CVE-2024-10612

CVE-2024-10612 affects ESAFENET CDG 5, impacting the function removeHookInvalidCourse in /com/esafenet/servlet/system/HookInvalidCourseService.java. The vulnerability arises from improper handling of the id parameter, enabling SQL injection and potentially enabling remote attack. Public exploit d...

CVE-2024-42885

CVE-2024-42885 concerns a SQL injection in ESAFENET CDG (v5.6 and earlier) that allows an attacker to execute arbitrary code via the id parameter on the data.jsp page. Affected product: ESAFENET CDG up to version 5.6. Root cause: improper handling of input used in SQL queries on data.jsp. Impact:...

CVE-2025-0788

CVE-2025-0788 affects ESAFENET CDG V5. The vulnerability is an SQL injection in the /content_top.jsp file, caused by manipulation of the id parameter. It can be exploited remotely, and public exploitation information exists. Multiple sources confirm the issue without clear vendor mitigation or re...

CVE-2025-3399

CVE-2025-3399 affects ESAFENET CDG 5.6.3.154.205_20250114. The vulnerability arises from improper handling of the ID parameter in /pubinfo/updateNotice.jsp, where manipulating ID leads to SQL injection. The issue is exploitable remotely and publicly disclosed; vendor response is noted as lacking ...

CVE-2024-10501

The CVE-2024-10501 entry concerns ESAFENET CDG 5. The vulnerability is in ExamCDGDocService.java, findById, where manipulation of the id parameter enables SQL injection. A remote attacker could trigger the issue, and public disclosures exist. Connected documents consistently describe the affected...

CVE-2024-10596

CVE-2024-10596 affects ESAFENET CDG 5, specifically the function delEntryptPolicySort in /com/esafenet/servlet/system/EncryptPolicyTypeService.java. The vulnerability arises from improper handling of the id argument, enabling SQL injection that can be exploited remotely. Public disclosure of the ...

CVE-2025-3400

CVE-2025-3400 affects ESAFENET CDG 5.6.3.154.205_20250114. The vulnerability resides in the file /client/UnChkMailApplication.jsp, where manipulating the parameter typename enables a remote SQL injection. Exploitation is possible without authentication and has been publicly disclosed. Multiple so...

CVE-2024-10377

CVE-2024-10377 affects ESAFENET CDG 5. The issue is in the function actionPassDecryptApplication1 of /com/esafenet/servlet/client/DecryptApplicationService.java. The attacker can manipulate the id parameter to trigger SQL injection, with remote exploitability reported. Publicly disclosed exploits...

CVE-2025-0794

The CVE-2025-0794 issue affects ESAFENET CDG V5, specifically the /todoDetail.jsp component. The vulnerability arises from unsafely handling the curpage parameter, enabling cross-site scripting (XSS). It can be triggered remotely and has public exploit disclosures, per multiple sources. Red Hat a...

CVE-2025-0795

CVE-2025-0795 affects ESAFENET CDG V5, where the flowId parameter in /todolistjump.jsp is vulnerable to reflected XSS. The issue potentially allows remote initiation and has publicly disclosed exploit information. Multiple sources (NVD, Red Hat, CVE list, PT Security, CNNVD) corroborate the vulne...

CVE-2024-10613

CVE-2024-10613 affects ESAFENET CDG 5, specifically the delSystemEncryptPolicy function in /com/esafenet/servlet/system/SystemEncryptPolicyService.java. The vulnerability arises from improper handling of the id argument, enabling SQL injection. Remote exploitation is possible, and public disclosu...

CVE-2025-3401

CVE-2025-3401 concerns ESAFENET CDG 5.6.3.154.205_20250114. The vulnerability is an SQL injection in the code path handling the parameter noticeId in the file /parameter/getLimitIPList.jsp. It is exploitable remotely and has been disclosed publicly. Multiple sources classify it as critical or hig...

CVE-2024-10279

CVE-2024-10279 affects ESAFENET CDG 5; SQL injection via the policyId argument in /com/esafenet/servlet/policy/PrintPolicyService.java. Vulnerability can be exploited remotely and is described as critical. Multiple sources confirm the vulnerable component and root cause; no vendor fix details are...

CVE-2024-10376

Consolidated details from connected documents confirm CVE-2024-10376 affects ESAFENET CDG version 5, specifically the actionPassOrNotAutoSign function in AutoSignService.java. The root cause is manipulation of the UniqueId parameter leading to SQL injection, exploitable remotely and publicized. T...

CVE-2025-0793

The CVE-2025-0793 entry concerns ESAFENET CDG V5. Affected component: the JSP file /todoDetail.jsp. Root cause: manipulation of the flowId parameter leads to SQL injection. Impact includes potential confidential data exposure, data integrity issues, and availability disruption; CVSS notes range f...

CVE-2024-10597

CVE-2024-10597 affects ESAFENET CDG 5, specifically the function delPolicyAction in /com/esafenet/servlet/system/PolicyActionService.java. The vulnerability arises from improper handling of the id parameter, enabling SQL injection and allowing remote exploitation. Public exploit information is no...

CVE-2024-46510

CVE-2024-46510 affects ESAFENET CDG v5. The NavigationAjax interface’s id parameter is vulnerable to SQL injection, as stated across multiple connected sources. Root cause: inadequate input validation on the id parameter allows SQL injection. Impact per CVSS: high confidentiality impact, low inte...

CVE-2025-0789

The CVE-2025-0789 entry concerns ESAFENET CDG V5. A vulnerability in the file /doneDetail.jsp arises from manipulating the flowId parameter, enabling SQL injection. Impact is described as remote exploitation with high severity; exploitation details have been disclosed publicly. Workarounds includ...

CVE-2024-10071

The CVE-2024-10071 vulnerability affects ESAFENET CDG 5, specifically the function actionUpdateEncryptPolicyEdit in /com/esafenet/servlet/policy/EncryptPolicyService.java. Manipulating the encryptPolicyId parameter enables SQL injection, with remote exploitation possible. Public exploit/disclosur...

CVE-2024-10278

CVE-2024-10278 affects ESAFENET CDG 5, specifically the ReUserOrganiseService.java path (/com/esafenet/servlet/user/ReUserOrganiseService.java). The vulnerability is a SQL injection triggered by manipulating the userId parameter, allowing remote initiation. Multiple sources confirm exploitation/p...

CVE-2024-10502

Summary of CVE-2024-10502 : Affects ESAFENET CDG 5. The vulnerability is in the function getOneFileDirectory of /com/esafenet/servlet/fileManagement/FileDirectoryService.java, where manipulating the argument directoryId enables a SQL injection. The attack may be initiated remotely, and multiple s...

CVE-2024-48343

Summary: CVE-2024-48343 is a SQL Injection vulnerability in ESAFENET CDG 5 and earlier that allows an attacker to execute arbitrary code via the id parameter of the dataSearch.jsp page. Affected product/versions: ESAFENET CDG 5 and earlier. Root cause: improper input handling for the id parameter...

CVE-2024-10594

ESAFENET CDG 5 vulnerability CVE-2024-10594 affects the docHistory function in /com/esafenet/servlet/fileManagement/FileDirectoryService.java. Manipulation of the fileId parameter results in SQL injection, enabling remote exploitation. Public exploit details exist per disclosures, and vendor resp...

CVE-2024-10610

CVE-2024-10610 affects ESAFENET CDG v5, specifically the function delProtocol in /com/esafenet/servlet/system/ProtocolService.java. The vulnerability arises from unsafe handling of the id argument, enabling a SQL injection that can be exploited remotely. Exploitation has been disclosed publicly; ...

CVE-2025-0791

CVE-2025-0791 affects ESAFENET CDG V5. The issue is a flaw in the /sdDoneDetail.jsp handling of the flowId parameter that enables SQL injection. The vulnerability is described as remote and has been disclosed publicly. Multiple sources corroborate this, reporting a critical severity due to potent...

CVE-2024-10135

The CVE-2024-10135 issue affects ESAFENET CDG 5, specifically the NetSecConfigService.java function actionDelNetSecConfig. The root cause is improper handling/manipulation of the id argument, leading to an SQL injection vulnerability. The vulnerability is exploitable remotely and has public explo...

CVE-2024-10070

CVE-2024-10070 affects ESAFENET CDG 5. The vulnerability lives in the function actionPolicyPush of PolicyPushControlAction.java and arises from improper handling of the policyId parameter, enabling SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. The vendor...

CVE-2024-10133

CVE-2024-10133 affects ESAFENET CDG 5, specifically the function updateNetSecPolicyPriority in NetSecPolicyAjax.java. The vulnerability arises from improper handling of the id/frontId parameter, enabling SQL injection via remote access. Public exploits have been reported; multiple sources corrobo...

CVE-2024-10134

The CVE-2024-10134 entry concerns ESAFENET CDG 5. The vulnerable component is the function connectLogout in /com/esafenet/servlet/ajax/MultiServerAjax.java, where the servername parameter is mishandled, causing SQL injection. Exploitation is described as remote and publicly disclosed. Multiple co...

CVE-2024-10611

CVE-2024-10611 affects ESAFENET CDG v5, with a SQL injection in the delProtocol function of /com/esafenet/servlet/system/PrintScreenListService.java caused by unsafely handling the id argument. This can be exploited remotely; public exploit details exist and vendor response was unavailable. Relat...

CVE-2024-10659

CVE-2024-10659 affects ESAFENET CDG 5. The vulnerability lies in the delSystemEncryptPolicy function of /com/esafenet/servlet/document/CDGAuthoriseTempletService.java, where manipulation of the id argument enables SQL injection. The issue can be exploited remotely and, per the initial records, th...

CVE-2025-0790

The CVE-2025-0790 entry affects ESAFENET CDG V5, specifically the file /doneDetail.jsp. The vulnerability arises from unsanitized or manipulated the curpage parameter, enabling cross-site scripting. Exploitation is possible remotely, and public disclosures exist. Multiple sources (NVD, Red Hat, C...

CVE-2024-10072

CVE-2024-10072 affects ESAFENET CDG version 5. The vulnerability exists in the function actionAddEncryptPolicyGroup of the file /com/esafenet/servlet/policy/EncryptPolicyService.java , where manipulation of the argument checklist enables an SQL injection. The issue can be exploited remotely and t...

CVE-2024-10379

ESAFENET CDG 5 contains a path traversal where the vulnerable function is actionViewDecyptFile in /com/esafenet/servlet/client/DecryptApplicationService.java. An attacker can manipulate decryptFileId (example: ../../../Windows/System32/drivers/etc/hosts) to access files outside the web root (path...

CVE-2024-10595

CVE-2024-10595 affects ESAFENET CDG 5. The vulnerability is in the function delFile/delDifferCourseList of /com/esafenet/servlet/ajax/PublicDocInfoAjax.java, leading to SQL injection. It can be exploited remotely; the exploit has been disclosed publicly. Multiple sources describe this as a critic...