Approved changes feed: RSS · Atom

cpe:2.3:a:digiwin:easyflow_gp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDigiwin (18dbde5d-3a25-581d-bda3-d32fc7ff848a)
ProductEasyflow Gp (4fe36414-4cd7-5681-b908-cd10cfc5d89d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13165 vulnerable 2026-06-08 07:04:31.721267 Digiwin|EasyFlow GP - Denial of service
HIGH (7.5)
EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in denial of web service.
Published: 2025-11-17T06:46:02.907Z
Updated: 2025-11-17T16:17:19.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13164 vulnerable 2026-06-08 07:04:31.720924 Digiwin|EasyFlow GP - Insufficiently Protected Credentials
MEDIUM (4.9)
EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext credentials of AD and system mail from the system frontend.
Published: 2025-11-17T06:23:21.352Z
Updated: 2025-11-17T16:19:24.139Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13163 vulnerable 2026-06-08 07:04:31.720508 Digiwin|EasyFlow GP - Insufficiently Protected Credentials
MEDIUM (4.9)
EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.
Published: 2025-11-17T06:17:06.848Z
Updated: 2025-11-17T16:21:36.951Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.