Skip to content
OpenAdvisories

Product · DigiWin

EasyFlow .NET

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-102454

    DigiWin｜EasyFlow .NET - Arbitrary File Upload

    EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

    DigiWin EasyFlow .NET
  • High 7.5
    CVE-2026-12581

    Digiwin｜EasyFlow .NET - Session Fixation

    EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote attackers replace a specific session ID for a user, they can gain the user's privilege once the user logs in.

    DigiWin EasyFlow .NET
  • High 7.5
    CVE-2025-11949

    Digiwin｜EasyFlow .NET and EasyFlow AiNet - Missing Authentication

    EasyFlow .NET and EasyFlow AiNet, developed by Digiwin, has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to obtain database administrator credentials via a specific functionality.

    DigiWin EasyFlow .NET EasyFlow AiNet