Advisories · Technology
DigiWin EasyFlow .NET.
Every CVE that names DigiWin EasyFlow .NET among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
DigiWin｜EasyFlow .NET - Reflected Cross-site Scripting
- DigiWin EasyFlow .NET
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
DigiWin｜EasyFlow .NET - Missing Authentication
- DigiWin EasyFlow .NET
- Authentication bypass
- CVSS 7.1 High
DigiWin｜EasyFlow .NET - Arbitrary File Read
- DigiWin EasyFlow .NET
- Path traversal
- CVSS 7.1 High
DigiWin｜EasyFlow .NET - SQL Injection
- DigiWin EasyFlow .NET
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
DigiWin｜EasyFlow .NET - Insecure Deserialization
- DigiWin EasyFlow .NET
- Insecure deserialization
- CVSS 8.6 High
DigiWin｜EasyFlow .NET - Arbitrary File Upload
- DigiWin EasyFlow .NET
- Unrestricted file upload
- CVSS 7.7 High
Digiwin｜EasyFlow .NET - Session Fixation
- Digiwin EasyFlow .NET
- Authentication bypass
- CVSS 5.1 Medium
Digiwin｜EasyFlow .NET - Stored Cross-Site Scripting
- Digiwin EasyFlow .NET
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
Digiwin｜EasyFlow .NET - SQL Injection
- Digiwin EasyFlow .NET
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Digiwin｜EasyFlow .NET - SQL Injection
- Digiwin EasyFlow .NET
- SQL injection
- CVSS 7.1 High
Digiwin｜EasyFlow .NET and EasyFlow AiNet
- Digiwin EasyFlow .NET
- Digiwin EasyFlow AiNet
- SQL injection
- CVSS 8.7 High
Digiwin｜EasyFlow .NET and EasyFlow AiNet - Missing Authentication
- Digiwin EasyFlow .NET
- Digiwin EasyFlow AiNet
- Authentication bypass
- CVSS 6.5 Medium
Digiwin EasyFlow .NET - Arbitrary File Download
- Digiwin EasyFlow .NET
- Path traversal
- CVSS 9.8 CriticalCritical · CVSS 9+
DigiWin EasyFlow .NET - SQL Injection
- DigiWin EasyFlow .NET
- SQL injection
- CVSS 9.8 CriticalCritical · CVSS 9+
DigiWin EasyFlow .NET - SQL Injection
- DigiWin EasyFlow .NET
- SQL injection