Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Digiwin Component: Easyflow .net Clear all filters
TI-2026-05229 CVE-2026-5964 · GHSA-f5h4-jpqg-93m3

Digiwin｜EasyFlow .NET - SQL Injection

Priority MEDIUM 48

EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00366 Published 2026-04-20 No fix listed CWE-89
TI-2026-05228 CVE-2026-5963 · GHSA-q2rh-xrfv-8x3m

Digiwin｜EasyFlow .NET - SQL Injection

Priority MEDIUM 48

EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00366 Published 2026-04-20 No fix listed CWE-89
TI-2024-06784 CVE-2024-7323 · GHSA-9mv8-jqq2-5m57

Digiwin EasyFlow .NET - Arbitrary File Download

Priority LOW 30

Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00599 Published 2024-08-02 No fix listed CWE-36