Easyflow .Net
Approved changes feed: RSS · Atom
cpe:2.3:a:digiwin:easyflow_.net:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Digiwin (18dbde5d-3a25-581d-bda3-d32fc7ff848a) |
|---|---|
| Product | Easyflow .Net (dc340786-5216-525b-abe6-582fe66a5375) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-12581 |
vulnerable | 2026-07-29 00:23:32.445113 |
Digiwin｜EasyFlow .NET - Session Fixation
HIGH (7.5)
EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote attackers replace a specific session ID for a user, they can gain the user's privilege once the user logs in.
Published: 2026-06-22T09:30:38.009Z
Updated: 2026-06-22T10:26:23.605Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-12580 |
vulnerable | 2026-07-29 00:23:32.444758 |
Digiwin｜EasyFlow .NET - Stored Cross-Site Scripting
MEDIUM (5.4)
EasyFlow .NET developed by Digiwin has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript code executed in users' browsers upon page load.
Published: 2026-06-22T09:26:04.638Z
Updated: 2026-06-22T10:26:46.700Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5964 |
vulnerable | 2026-06-08 08:07:04.316361 |
Digiwin｜EasyFlow .NET - SQL Injection
CRITICAL (9.8)
EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Published: 2026-04-20T07:36:58.476Z
Updated: 2026-04-20T13:38:08.600Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5963 |
vulnerable | 2026-06-08 08:07:04.311007 |
Digiwin｜EasyFlow .NET - SQL Injection
CRITICAL (9.8)
EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Published: 2026-04-20T07:32:20.443Z
Updated: 2026-04-20T13:42:03.062Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12503 |
vulnerable | 2026-06-08 07:04:30.336334 |
Digiwin｜EasyFlow .NET and EasyFlow AiNet
MEDIUM (6.5)
EasyFlow .NET and EasyFlow AiNet developed by Digiwin has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
Published: 2025-11-03T06:51:55.994Z
Updated: 2025-11-03T13:48:19.281Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11949 |
vulnerable | 2026-06-08 07:04:29.455786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7323 |
vulnerable | 2026-06-08 06:58:21.888096 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5311 |
vulnerable | 2026-06-08 06:56:15.487560 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4893 |
vulnerable | 2026-06-08 06:50:18.974113 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.