CVE Intelligence

Digiwin EasyFlow GP vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Digiwin EasyFlow GP: 3 record(s), with affected versions and fixes.

CVE-2025-13165 High · 7.5 CWE-770 Nov 17, 2025
Digiwin｜EasyFlow GP - Denial of service
EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in denial of web service.
CVE-2025-13164 Medium · 4.9 CWE-522 Nov 17, 2025
Digiwin｜EasyFlow GP - Insufficiently Protected Credentials
EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext credentials of AD and system mail from the system frontend.
CVE-2025-13163 Medium · 4.9 CWE-522 Nov 17, 2025
Digiwin｜EasyFlow GP - Insufficiently Protected Credentials
EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.