Veille CVE

Recherche « DigiWin EasyFlow .NET »

8 CVE

Critique 2 Élevée 2 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « DigiWin EasyFlow .NET » ✕
  1. CVE-2026-102459 6.1 Moyenne

    DigiWin EasyFlow .NET

    EasyFlow .NET developed by Digiwin has a Reflected Cross-site Scripting vulnerability. Unauthenticated remote attackers can execute arbitrary JavaScript codes in user's browser through phishing attacks.

  2. CVE-2026-102458 9.8 Critique

    DigiWin EasyFlow .NET

    EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords through a specific API.

  3. CVE-2026-102457 6.5 Moyenne

    DigiWin EasyFlow .NET

    EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit this vulnerability to download arbitrary system files.

  4. CVE-2026-102456 6.5 Moyenne

    DigiWin EasyFlow .NET

    EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents.

  5. CVE-2026-102455 9.8 Critique

    DigiWin EasyFlow .NET

    EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content.

  6. CVE-2026-102454 7.2 Élevée

    DigiWin EasyFlow .NET

    EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

  7. CVE-2026-12581 7.5 Élevée

    Digiwin EasyFlow .NET

    EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote attackers replace a specific session ID for a user, they can gain the user's privilege once the user logs in.

  8. CVE-2026-12580 5.4 Moyenne

    Digiwin EasyFlow .NET

    EasyFlow .NET developed by Digiwin has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript code executed in users' browsers upon page load.