CVE Intelligence

Digiwin EasyFlow AiNet vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Digiwin EasyFlow AiNet: 2 record(s), with affected versions and fixes.

CVE-2025-12503 Medium · 6.5 CWE-89 Nov 3, 2025
Digiwin｜EasyFlow .NET and EasyFlow AiNet
EasyFlow .NET and EasyFlow AiNet developed by Digiwin has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
CVE-2025-11949 High · 7.5 CWE-306 Oct 21, 2025
Digiwin｜EasyFlow .NET and EasyFlow AiNet - Missing Authentication
EasyFlow .NET and EasyFlow AiNet, developed by Digiwin, has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to obtain database administrator credentials via a specific functionality.