Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.8 CVE-2026-5963 EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to r… Easyflow .net after 6.6.17 Fix from $2,3002026-04-20 CRITICAL 9.8 CVE-2026-5964 EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to r… Easyflow .net after 6.6.17 Fix from $2,3002026-04-20 MEDIUM 6.5 CVE-2024-7323 Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input. A remote att… Easyflow .net 6.6.17+ Fix from $1,6002024-08-02 CRITICAL 9.8 CVE-2022-32456 Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, mod… Business Process Management 5.8.8.1+ Fix from $2,3002022-07-20 HIGH 7.5 CVE-2022-32458 Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input. An unauthenticated remote attacker… Business Process Management 5.8.8.1+ Fix from $1,9502022-07-20 MEDIUM 5.3 CVE-2022-32457 Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network… Business Process Management 5.8.8.1+ Fix from $1,6002022-07-20