Digiwin vulnerabilities

Products

• Easyflow .net 15
• Easyflow .net 5
• Business Process Management 3
• Easyflow Gp 3
• Easyflow Ainet 2
• Erp 2

Newest

• digiwin easyflow .net DigiWin｜EasyFlow .NET - Reflected Cross-site Scripting CVE-2026-102459 5.1 MediumSeptember 30, 2026
• digiwin easyflow .net DigiWin｜EasyFlow .NET - Missing Authentication CVE-2026-102458 9.3 CriticalSeptember 30, 2026
• digiwin easyflow .net DigiWin｜EasyFlow .NET - Arbitrary File Read CVE-2026-102457 7.1 HighSeptember 30, 2026
• digiwin easyflow .net DigiWin｜EasyFlow .NET - SQL Injection CVE-2026-102456 7.1 HighSeptember 30, 2026
• digiwin easyflow .net DigiWin｜EasyFlow .NET - Insecure Deserialization CVE-2026-102455 9.3 CriticalSeptember 30, 2026
• digiwin easyflow .net DigiWin｜EasyFlow .NET - Arbitrary File Upload CVE-2026-102454 8.6 HighSeptember 30, 2026
• digiwin easyflow .net Digiwin｜EasyFlow .NET - Session Fixation CVE-2026-12581 7.7 HighJune 22, 2026
• digiwin easyflow .net Digiwin｜EasyFlow .NET - Stored Cross-Site Scripting CVE-2026-12580 5.1 MediumJune 22, 2026
• digiwin easyflow .net Digiwin｜EasyFlow .NET - SQL Injection CVE-2026-5964 9.3 CriticalApril 20, 2026
• digiwin easyflow .net Digiwin｜EasyFlow .NET - SQL Injection CVE-2026-5963 9.3 CriticalApril 20, 2026
• digiwin easyflow gp Digiwin｜EasyFlow GP - Denial of service CVE-2025-13165 8.7 HighNovember 17, 2025
• digiwin easyflow gp Digiwin｜EasyFlow GP - Insufficiently Protected Credentials CVE-2025-13164 6.9 MediumNovember 17, 2025
• digiwin easyflow gp Digiwin｜EasyFlow GP - Insufficiently Protected Credentials CVE-2025-13163 6.9 MediumNovember 17, 2025
• digiwin easyflow .net, easyflow ainet +1 more Digiwin｜EasyFlow .NET and EasyFlow AiNet CVE-2025-12503 7.1 HighNovember 3, 2025
• digiwin easyflow .net, easyflow ainet +1 more Digiwin｜EasyFlow .NET and EasyFlow AiNet - Missing Authentication CVE-2025-11949 8.7 HighOctober 21, 2025
• digiwin eai Digiwin｜EAI - Privilege Escalation CVE-2025-7344 8.7 HighJuly 21, 2025
• digiwin sft Digiwin｜SFT - SQL Injection CVE-2025-7343 9.3 CriticalJuly 21, 2025
• aureus erp Digiwin ERP UploadAjaxAPI.ashx unrestricted upload CVE-2025-2706 5.3 MediumMarch 24, 2025
• aureus erp Digiwin ERP FileUploadApi.ashx DoWebUpload unrestricted upload CVE-2025-2705 6.9 MediumMarch 24, 2025
• digiwin easyflow .net Digiwin EasyFlow .NET - Arbitrary File Download CVE-2024-7323 6.5 MediumAugust 2, 2024
• digiwin easyflow .net DigiWin EasyFlow .NET - SQL Injection CVE-2024-5311 9.8 CriticalJune 3, 2024
• digiwin easyflow .net DigiWin EasyFlow .NET - SQL Injection CVE-2024-4893 9.8 CriticalMay 15, 2024
• data systems consulting co., ltd. bpm, digiwin business process management +1 more Data Systems Consulting Co., Ltd. BPM - XML External Entity (XXE) Injection CVE-2022-32458 7.5 HighJuly 20, 2022
• data systems consulting co., ltd. bpm, digiwin business process management +1 more Data Systems Consulting Co., Ltd. BPM - Blind Server-Side Request Forgery (SSRF) CVE-2022-32457 5.3 MediumJuly 20, 2022
• data systems consulting co., ltd. bpm, digiwin business process management +1 more Data Systems Consulting Co., Ltd. BPM - SQL Injection CVE-2022-32456 9.8 CriticalJuly 20, 2022