Priority HIGH 80
SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00631 · Published 2024-09-05 · No fix listed CWE-89
Priority HIGH 70
A vulnerability was identified in ESAFENET CDG up to 20260615.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00411 · Published 2026-08-05 · No fix listed CWE-74
Priority HIGH 70
A vulnerability has been found in ESAFENET CDG 5.6.3.154.205_20250114 and classified as critical.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00684 · Published 2025-04-08 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00684 · Published 2025-04-08 · No fix listed CWE-74
Priority HIGH 70
A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5.6.3.154.205_20250114.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00684 · Published 2025-04-08 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in ESAFENET CDG 5.6.3.154.205.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00641 · Published 2025-03-28 · No fix listed CWE-74
Priority HIGH 70
A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00476 · Published 2025-03-03 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in ESAFENET CDG 5.6.3.154.205.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00509 · Published 2025-03-02 · No fix listed CWE-74
Priority HIGH 68
ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interface
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00353 · Published 2024-09-30 · No fix listed CWE-89
Priority MEDIUM 60
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.39019 · Published 2019-03-08 · No fix listed
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in ESAFENET CDG 3.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00334 · Published 2025-03-31 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.03413 · Published 2025-03-03 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00439 · Published 2025-03-03 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in ESAFENET CDG 5.6.3.154.205_20250114.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00334 · Published 2025-02-10 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in ESAFENET CDG V5.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2025-01-29 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in ESAFENET CDG V5 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2025-01-29 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability has been found in ESAFENET CDG V5 and classified as critical.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00639 · Published 2025-01-29 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in ESAFENET CDG V5.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0056 · Published 2025-01-29 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0056 · Published 2025-01-28 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability classified as problematic was found in ESAFENET CDG V5.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0039 · Published 2025-01-28 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as critical has been found in ESAFENET CDG V5.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00535 · Published 2025-01-28 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in ESAFENET CDG V5.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00436 · Published 2025-01-28 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in ESAFENET CDG V5.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00314 · Published 2025-01-28 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in ESAFENET CDG V5.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00436 · Published 2025-01-28 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.05267 · Published 2024-11-01 · No fix listed CWE-89
Load more
THREATIST.IORead the docs