Read the docs

Digiwin

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Digiwin records in CISA KEV

No Digiwin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Business Process Management 3 records MEDIUM Easyflow .net 3 records MEDIUM

Records

3 records in Easyflow .net · all components

TI-2026-05229 CVE-2026-5964 · GHSA-f5h4-jpqg-93m3

Digiwin｜EasyFlow .NET - SQL Injection

Priority MEDIUM 48

EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00366 Published 2026-04-20 No fix listed CWE-89
TI-2026-05228 CVE-2026-5963 · GHSA-q2rh-xrfv-8x3m

Digiwin｜EasyFlow .NET - SQL Injection

Priority MEDIUM 48

EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00366 Published 2026-04-20 No fix listed CWE-89
TI-2024-06784 CVE-2024-7323 · GHSA-9mv8-jqq2-5m57

Digiwin EasyFlow .NET - Arbitrary File Download

Priority LOW 30

Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00599 Published 2024-08-02 No fix listed CWE-36
Open these records in search →