ESAFENET kayıtları
esafenet üreticisine ait 53 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')31
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')14
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-24 Path Traversal: '../filedir'1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
53 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2019-9632Kavram kanıtı | ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack esafenet · electronic document security management system | Yüksek7,5 | — | %39,0 | 8 Mar 2019 |
36İzleyin | CVE-2024-42885İstismar yok | SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jspesafenet · cdg · CWE-89 | Kritik9,1 | — | %0,6 | 5 Eyl 2024 |
31İzleyin | CVE-2017-18636İstismar yok | CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.esafenet · cdg · CWE-22 | Yüksek7,5 | — | %2,0 | 30 Eyl 2019 |
30İzleyin | CVE-2024-46510İstismar yok | ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interfaceesafenet · cdg · CWE-89 | Yüksek7,6 | — | %0,3 | 30 Eyl 2024 |
27İzleyin | CVE-2025-3401İstismar yok | ESAFENET CDG getLimitIPList.jsp sql injectionesafenet · cdg · CWE-74 | Orta6,9 | — | %0,6 | 7 Nis 2025 |
27İzleyin | CVE-2025-3400İstismar yok | ESAFENET CDG UnChkMailApplication.jsp sql injectionesafenet · cdg · CWE-74 | Orta6,9 | — | %0,6 | 7 Nis 2025 |
27İzleyin | CVE-2025-3399İstismar yok | ESAFENET CDG updateNotice.jsp sql injectionesafenet · cdg · CWE-74 | Orta6,9 | — | %0,6 | 7 Nis 2025 |
27İzleyin | CVE-2025-2927İstismar yok | ESAFENET CDG getFileTypeList.jsp sql injectionesafenet · cdg · CWE-74 | Orta6,9 | — | %0,6 | 28 Mar 2025 |
27İzleyin | CVE-2025-1840İstismar yok | ESAFENET CDG updateorg.jsp sql injectionesafenet · cdg · CWE-74 | Orta6,9 | — | %0,5 | 2 Mar 2025 |
27İzleyin | CVE-2025-1841İstismar yok | ESAFENET CDG ClientSortLog.jsp sql injectionesafenet · cdg · CWE-74 | Orta6,9 | — | %0,4 | 2 Mar 2025 |
25İzleyin | CVE-2024-48343İstismar yok | A SQL Injection vulnerability in ESAFENET CDG 5 and earlier allows an attacker to execute arbitrary code via the id parameter of the dataSeaesafenet · cdg · CWE-89 | Orta6,3 | — | %0,3 | 25 Eki 2024 |
23İzleyin | CVE-2024-10660İstismar yok | ESAFENET CDG HookService.java deleteHook sql injectionesafenet · cdg · CWE-89 | Orta5,3 | — | %5,2 | 1 Kas 2024 |
22İzleyin | CVE-2025-1845İstismar yok | ESAFENET DSM examExportPDF command injectionesafenet · dsm · CWE-74 | Orta5,3 | — | %3,4 | 2 Mar 2025 |
21İzleyin | CVE-2024-10376İstismar yok | ESAFENET CDG AutoSignService.java actionPassOrNotAutoSign sql injectionesafenet · cdg · CWE-89 | Orta5,3 | — | %0,7 | 25 Eki 2024 |
21İzleyin | CVE-2024-10377İstismar yok | ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injectionesafenet · cdg · CWE-89 | Orta5,3 | — | %0,7 | 25 Eki 2024 |
21İzleyin | CVE-2024-10379İstismar yok | ESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversalesafenet · cdg · CWE-24 | Orta5,3 | — | %0,6 | 25 Eki 2024 |
21İzleyin | CVE-2024-9560İstismar yok | ESAFENET CDG Catelogs;logindojojs delCatelogs sql injectionesafenet · cdg · CWE-89 | Orta5,3 | — | %0,6 | 6 Eki 2024 |
21İzleyin | CVE-2024-9536İstismar yok | ESAFENET CDG MultiServerBackService sql injectionesafenet · cdg · CWE-89 | Orta5,3 | — | %0,6 | 5 Eki 2024 |
21İzleyin | CVE-2025-0793İstismar yok | ESAFENET CDG todoDetail.jsp sql injectionesafenet · cdg · CWE-74 | Orta5,3 | — | %0,6 | 28 Oca 2025 |
21İzleyin | CVE-2024-10279İstismar yok | ESAFENET CDG PrintPolicyService.java sql injectionesafenet · cdg · CWE-89 | Orta5,3 | — | %0,5 | 23 Eki 2024 |
21İzleyin | CVE-2024-10597İstismar yok | ESAFENET CDG PolicyActionService.java delPolicyAction sql injectionesafenet · cdg · CWE-89 | Orta5,3 | — | %0,5 | 31 Eki 2024 |
21İzleyin | CVE-2024-10278İstismar yok | ESAFENET CDG ReUserOrganiseService.java sql injectionesafenet · cdg · CWE-89 | Orta5,3 | — | %0,5 | 23 Eki 2024 |
21İzleyin | CVE-2024-10277İstismar yok | ESAFENET CDG UsbKeyAjax.java sql injectionesafenet · cdg · CWE-89 | Orta5,3 | — | %0,5 | 23 Eki 2024 |
21İzleyin | CVE-2024-10659İstismar yok | ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injectionesafenet · cdg · CWE-89 | Orta5,3 | — | %0,5 | 1 Kas 2024 |
21İzleyin | CVE-2024-10613İstismar yok | ESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy sql injectionesafenet · cdg · CWE-89 | Orta5,3 | — | %0,5 | 31 Eki 2024 |
- CVE-2019-963242Planlayın
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack
YüksekCVSS 7,5Kavram kanıtıEPSS %39esafenet · electronic document security management system8 Mar 2019
- CVE-2024-4288536İzleyin
SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp
KritikCVSS 9,1İstismar yokEPSS %0esafenet · cdg5 Eyl 2024
- CVE-2017-1863631İzleyin
CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.
YüksekCVSS 7,5İstismar yokEPSS %2esafenet · cdg30 Eyl 2019
- CVE-2024-4651030İzleyin
ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interface
YüksekCVSS 7,6İstismar yokEPSS %0esafenet · cdg30 Eyl 2024
- CVE-2025-340127İzleyin
ESAFENET CDG getLimitIPList.jsp sql injection
OrtaCVSS 6,9İstismar yokEPSS %0esafenet · cdg7 Nis 2025
- CVE-2025-340027İzleyin
ESAFENET CDG UnChkMailApplication.jsp sql injection
OrtaCVSS 6,9İstismar yokEPSS %0esafenet · cdg7 Nis 2025
- CVE-2025-339927İzleyin
ESAFENET CDG updateNotice.jsp sql injection
OrtaCVSS 6,9İstismar yokEPSS %0esafenet · cdg7 Nis 2025
- CVE-2025-292727İzleyin
ESAFENET CDG getFileTypeList.jsp sql injection
OrtaCVSS 6,9İstismar yokEPSS %0esafenet · cdg28 Mar 2025
- CVE-2025-184027İzleyin
ESAFENET CDG updateorg.jsp sql injection
OrtaCVSS 6,9İstismar yokEPSS %0esafenet · cdg2 Mar 2025
- CVE-2025-184127İzleyin
ESAFENET CDG ClientSortLog.jsp sql injection
OrtaCVSS 6,9İstismar yokEPSS %0esafenet · cdg2 Mar 2025
- CVE-2024-4834325İzleyin
A SQL Injection vulnerability in ESAFENET CDG 5 and earlier allows an attacker to execute arbitrary code via the id parameter of the dataSea
OrtaCVSS 6,3İstismar yokEPSS %0esafenet · cdg25 Eki 2024
- CVE-2024-1066023İzleyin
ESAFENET CDG HookService.java deleteHook sql injection
OrtaCVSS 5,3İstismar yokEPSS %5esafenet · cdg1 Kas 2024
- CVE-2025-184522İzleyin
ESAFENET DSM examExportPDF command injection
OrtaCVSS 5,3İstismar yokEPSS %3esafenet · dsm2 Mar 2025
- CVE-2024-1037621İzleyin
ESAFENET CDG AutoSignService.java actionPassOrNotAutoSign sql injection
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg25 Eki 2024
- CVE-2024-1037721İzleyin
ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injection
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg25 Eki 2024
- CVE-2024-1037921İzleyin
ESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversal
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg25 Eki 2024
- CVE-2024-956021İzleyin
ESAFENET CDG Catelogs;logindojojs delCatelogs sql injection
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg6 Eki 2024
- CVE-2024-953621İzleyin
ESAFENET CDG MultiServerBackService sql injection
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg5 Eki 2024
- CVE-2025-079321İzleyin
ESAFENET CDG todoDetail.jsp sql injection
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg28 Oca 2025
- CVE-2024-1027921İzleyin
ESAFENET CDG PrintPolicyService.java sql injection
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg23 Eki 2024
- CVE-2024-1059721İzleyin
ESAFENET CDG PolicyActionService.java delPolicyAction sql injection
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg31 Eki 2024
- CVE-2024-1027821İzleyin
ESAFENET CDG ReUserOrganiseService.java sql injection
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg23 Eki 2024
- CVE-2024-1027721İzleyin
ESAFENET CDG UsbKeyAjax.java sql injection
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg23 Eki 2024
- CVE-2024-1065921İzleyin
ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg1 Kas 2024
- CVE-2024-1061321İzleyin
ESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy sql injection
OrtaCVSS 5,3İstismar yokEPSS %0esafenet · cdg31 Eki 2024