Read the docs

Sangfor Technologies Co. Ltd.

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Sangfor Technologies Co. Ltd. records in CISA KEV

No Sangfor Technologies Co. Ltd. vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2023-06675 CVE-2023-7307 · GHSA-ffx8-q4qj-8vmr

Sangfor Behavior Management System XML External Entity Injection

Priority HIGH 77

Sangfor Behavior Management System (also referred to as DC Management System in Chinese-language documentation) contains an XML external entity (XXE) injection vulnerability in the /src/sangforindex endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00525 Published 2025-08-27 No fix listed CWE-611
TI-2025-24210 CVE-2025-34041 · GHSA-m56w-j7r7-p39f

Sangfor Endpoint Detection and Response OS Command Injection

Priority MEDIUM 59

An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.07494 Published 2025-06-24 No fix listed CWE-78
Open these records in search →