Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Sangfor Technologies Co. Ltd. Clear all filters
TI-2023-06675 CVE-2023-7307 · GHSA-ffx8-q4qj-8vmr

Sangfor Behavior Management System XML External Entity Injection

Priority HIGH 77

Sangfor Behavior Management System (also referred to as DC Management System in Chinese-language documentation) contains an XML external entity (XXE) injection vulnerability in the /src/sangforindex endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00525 Published 2025-08-27 No fix listed CWE-611
TI-2025-24210 CVE-2025-34041 · GHSA-m56w-j7r7-p39f

Sangfor Endpoint Detection and Response OS Command Injection

Priority MEDIUM 59

An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.07494 Published 2025-06-24 No fix listed CWE-78