DI
Vendor
Digiwin
25
CVEs
0
On KEV
6
New 30D
Products
EN9.8
EasyFlow .NET
Digiwin
13 CVEs0 on KEV6 new
BP9.8
Business Process Management
Digiwin
3 CVEs0 on KEV0 new
EG7.5
EasyFlow GP
Digiwin
3 CVEs0 on KEV0 new
EA7.5
EasyFlow AiNet
Digiwin
2 CVEs0 on KEV0 new
ER7.3
ERP
Digiwin
2 CVEs0 on KEV0 new
EA8.8
EAI
Digiwin
1 CVEs0 on KEV0 new
SF9.8
SFT
Digiwin
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102459 | EN EasyFlow .NET DigiWin | 6.1 | Sep 30 | DigiWin｜EasyFlow .NET - Reflected Cross-site Scripting |
| CVE-2026-102458 | EN EasyFlow .NET DigiWin | 9.8 | Sep 30 | DigiWin｜EasyFlow .NET - Missing Authentication |
| CVE-2026-102457 | EN EasyFlow .NET DigiWin | 6.5 | Sep 30 | DigiWin｜EasyFlow .NET - Arbitrary File Read |
| CVE-2026-102456 | EN EasyFlow .NET DigiWin | 6.5 | Sep 30 | DigiWin｜EasyFlow .NET - SQL Injection |
| CVE-2026-102455 | EN EasyFlow .NET DigiWin | 9.8 | Sep 30 | DigiWin｜EasyFlow .NET - Insecure Deserialization |
| CVE-2026-102454 | EN EasyFlow .NET DigiWin | 7.2 | Sep 30 | DigiWin｜EasyFlow .NET - Arbitrary File Upload |
| CVE-2026-12581 | EN EasyFlow .NET Digiwin | 7.5 | Jun 22 | Digiwin｜EasyFlow .NET - Session Fixation |
| CVE-2026-12580 | EN EasyFlow .NET Digiwin | 5.4 | Jun 22 | Digiwin｜EasyFlow .NET - Stored Cross-Site Scripting |
| CVE-2026-5964 | EN EasyFlow .NET Digiwin | 9.8 | Apr 20 | Digiwin｜EasyFlow .NET - SQL Injection |
| CVE-2026-5963 | EN EasyFlow .NET Digiwin | 9.8 | Apr 20 | Digiwin｜EasyFlow .NET - SQL Injection |
| CVE-2025-13165 | EG EasyFlow GP Digiwin | 7.5 | Nov 17 | Digiwin｜EasyFlow GP - Denial of service |
| CVE-2025-13164 | EG EasyFlow GP Digiwin | 4.9 | Nov 17 | Digiwin｜EasyFlow GP - Insufficiently Protected Credentials |
| CVE-2025-13163 | EG EasyFlow GP Digiwin | 4.9 | Nov 17 | Digiwin｜EasyFlow GP - Insufficiently Protected Credentials |
| CVE-2025-12503 | EA EasyFlow AiNet Digiwin | 6.5 | Nov 3 | Digiwin｜EasyFlow .NET and EasyFlow AiNet |
| CVE-2025-11949 | EN EasyFlow .NET Digiwin | 7.5 | Oct 21 | Digiwin｜EasyFlow .NET and EasyFlow AiNet - Missing Authentication |
| CVE-2025-7344 | EA EAI Digiwin | 8.8 | Jul 21 | Digiwin｜EAI - Privilege Escalation |
| CVE-2025-7343 | SF SFT Digiwin | 9.8 | Jul 21 | Digiwin｜SFT - SQL Injection |
| CVE-2025-2706 | ER ERP Digiwin | 6.3 | Mar 24 | Digiwin ERP UploadAjaxAPI.ashx unrestricted upload |
| CVE-2025-2705 | ER ERP Digiwin | 7.3 | Mar 24 | Digiwin ERP FileUploadApi.ashx DoWebUpload unrestricted upload |
| CVE-2024-7323 | EN Easyflow .net Digiwin | 6.5 | Aug 2 | Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately filter user input |
| CVE-2022-32458 | BP Business Process Management Digiwin | 7.5 | Jul 20 | Digiwin BPM has a XML External Entity Injection (XXE) vulnerability due to insufficient validation for user input |
| CVE-2022-32457 | BP Business Process Management Digiwin | 5.3 | Jul 20 | Digiwin BPM has inadequate filtering for URL parameter |
| CVE-2022-32456 | BP Business Process Management Digiwin | 9.8 | Jul 20 | Digiwin BPM’s function has insufficient validation for user input |