Skip to content
OpenAdvisories

Vendor

ESAFENET

51 known vulnerabilities.

Products

39 results · Clear filters · Feed

  • Medium 6.3

    ESAFENET CDG UserAjax sql injection

    A vulnerability, which was classified as critical, was found in ESAFENET CDG 3. Affected is an unknown function of the file /CDGServer3/UserAjax. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. T…

  • Medium 6.3

    ESAFENET DSM examExportPDF command injection

    A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the function examExportPDF of the file /admin/plan/examExportPDF. The manipulation of the argument s leads to command injection. The attack can …

  • Medium 6.3

    ESAFENET CDG backupLogDetail.jsp sql injection

    A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. …

  • Medium 6.3

    ESAFENET CDG addPolicyToSafetyGroup.jsp sql injection

    A vulnerability was found in ESAFENET CDG 5.6.3.154.205_20250114. It has been classified as critical. Affected is an unknown function of the file addPolicyToSafetyGroup.jsp. The manipulation of the argument safetyGroupId leads to sql injection. It is possible…

  • Medium 6.3

    ESAFENET CDG todoDetail.jsp sql injection

    A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /todoDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack can be launched re…

  • Medium 6.3

    ESAFENET CDG sdTodoDetail.jsp sql injection

    A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The e…

  • Medium 6.3

    ESAFENET CDG sdDoneDetail.jsp sql injection

    A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotel…

  • Medium 6.3

    ESAFENET CDG doneDetail.jsp sql injection

    A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to initiate the attack remotely. The exploit has…

  • Medium 6.3

    ESAFENET CDG content_top.jsp sql injection

    A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /content_top.jsp. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. Th…

  • Medium 6.3

    ESAFENET CDG appDetail.jsp sql injection

    A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exp…

  • Medium 6.3

    ESAFENET CDG HookService.java deleteHook sql injection

    A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function deleteHook of the file /com/esafenet/servlet/policy/HookService.java. The manipulation of the argument hookId leads to sql injection. It is possible to i…

  • Medium 6.3

    ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection

    A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/document/CDGAuthoriseTempletService.java. The manipulation of the argument id …

  • Medium 6.3

    ESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy sql injection

    A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/system/SystemEncryptPolicyService.java. The manipulation of the argument id …

  • Medium 6.3

    ESAFENET CDG HookInvalidCourseService.java removeHookInvalidCourse sql injection

    A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function removeHookInvalidCourse of the file /com/esafenet/servlet/system/HookInvalidCourseService.java. The manipulation of the argument id leads to sql injectio…

  • Medium 6.3

    ESAFENET CDG PrintScreenListService.java delProtocol sql injection

    A vulnerability was found in ESAFENET CDG 5 and classified as critical. This issue affects the function delProtocol of the file /com/esafenet/servlet/system/PrintScreenListService.java. The manipulation of the argument id leads to sql injection. The attack ma…

  • Medium 6.3

    ESAFENET CDG ProtocolService.java delProtocol sql injection

    A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function delProtocol of the file /com/esafenet/servlet/system/ProtocolService.java. The manipulation of the argument id leads to sql injection. The att…

  • Medium 6.3

    ESAFENET CDG PolicyActionService.java delPolicyAction sql injection

    A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to sql injection. It is possible to…

  • Medium 6.3

    ESAFENET CDG EncryptPolicyTypeService.java delEntryptPolicySort sql injection

    A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function delEntryptPolicySort of the file /com/esafenet/servlet/system/EncryptPolicyTypeService.java. The manipulation of the argument id leads to sql in…

  • Medium 6.3

    ESAFENET CDG PublicDocInfoAjax.java delDifferCourseList sql injection

    A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. T…

  • Medium 6.3

    ESAFENET CDG FileDirectoryService.java docHistory sql injection

    A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument fileId leads to sql injection. It…

  • Medium 6.3

    ESAFENET CDG FileDirectoryService.java getOneFileDirectory sql injection

    A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function getOneFileDirectory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument directoryId l…

  • Medium 6.3

    ESAFENET CDG ExamCDGDocService.java findById sql injection

    A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function findById of the file /com/esafenet/servlet/document/ExamCDGDocService.java. The manipulation of the argument id leads to sql injection. It is possible to…

  • Medium 6.3

    ESAFENET CDG HookWhiteListService.java sql injection

    A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/policy/HookWhiteListService.java. The manipulation of the argument policyId leads to sq…

  • Medium 4.3

    ESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversal

    A vulnerability classified as problematic was found in ESAFENET CDG 5. Affected by this vulnerability is the function actionViewDecyptFile of the file /com/esafenet/servlet/client/DecryptApplicationService.java. The manipulation of the argument decryptFileId …

  • Medium 6.3

    ESAFENET CDG CDGRenewApplicationService.java actionViewCDGRenewFile sql injection

    A vulnerability classified as critical has been found in ESAFENET CDG 5. Affected is the function actionViewCDGRenewFile of the file /com/esafenet/servlet/client/CDGRenewApplicationService.java. The manipulation of the argument CDGRenewFileId leads to sql inj…

  • Medium 6.3

    ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injection

    A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. This issue affects the function actionPassDecryptApplication1 of the file /com/esafenet/servlet/client/DecryptApplicationService.java. The manipulation of the argument id leads to sql…

  • Medium 6.3

    ESAFENET CDG AutoSignService.java actionPassOrNotAutoSign sql injection

    A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects the function actionPassOrNotAutoSign of the file /com/esafenet/servlet/service/processsign/AutoSignService.java. The manipulation of the argument UniqueI…

  • Medium 6.3

    ESAFENET CDG PrintPolicyService.java sql injection

    A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code of the file /com/esafenet/servlet/policy/PrintPolicyService.java. The manipulation of the argument policyId leads to sql injection. The atta…

  • Medium 6.3

    ESAFENET CDG ReUserOrganiseService.java sql injection

    A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the file /com/esafenet/servlet/user/ReUserOrganiseService.java. The manipulation of the argument userId leads to sql injection. It is possible to …

  • Medium 6.3

    ESAFENET CDG UsbKeyAjax.java sql injection

    A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/ajax/UsbKeyAjax.java. The manipulation of the argument id leads to sql injection. The attack may be …

  • Medium 6.3

    ESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injection

    A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The manipulation of the argument id leads to sql injection. It …

  • Medium 6.3

    ESAFENET CDG MultiServerAjax.java connectLogout sql injection

    A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is the function connectLogout of the file /com/esafenet/servlet/ajax/MultiServerAjax.java. The manipulation of the argument servername leads to sql injection. The a…

  • Medium 6.3

    ESAFENET CDG NetSecPolicyAjax.java updateNetSecPolicyPriority sql injection

    A vulnerability has been found in ESAFENET CDG 5 and classified as critical. Affected by this vulnerability is the function updateNetSecPolicyPriority of the file /com/esafenet/servlet/ajax/NetSecPolicyAjax.java. The manipulation of the argument id/frontId le…

  • Medium 6.3

    ESAFENET CDG EncryptPolicyService.java actionAddEncryptPolicyGroup sql injection

    A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. This issue affects the function actionAddEncryptPolicyGroup of the file /com/esafenet/servlet/policy/EncryptPolicyService.java. The manipulation of the argument checklist lea…

  • Medium 6.3

    ESAFENET CDG EncryptPolicyService.java actionUpdateEncryptPolicyEdit sql injection

    A vulnerability classified as critical was found in ESAFENET CDG 5. This vulnerability affects the function actionUpdateEncryptPolicyEdit of the file /com/esafenet/servlet/policy/EncryptPolicyService.java. The manipulation of the argument encryptPolicyId lead…

  • Medium 6.3

    ESAFENET CDG PolicyPushControlAction.java actionPolicyPush sql injection

    A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function actionPolicyPush of the file /com/esafenet/policy/action/PolicyPushControlAction.java. The manipulation of the argument policyId leads to sql injection. It is p…

  • Medium 6.3

    ESAFENET CDG MailDecryptApplicationService.java actionPassMainApplication sql injection

    A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function actionPassMainApplication of the file /com/esafenet/servlet/client/MailDecryptApplicationService.java. The manipulation of the argument id leads…

  • Medium 6.3

    ESAFENET CDG Catelogs;logindojojs delCatelogs sql injection

    A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is the function delCatelogs of the file /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs. The manipulation of the argument id leads to sql injecti…

  • Medium 6.3

    ESAFENET CDG MultiServerBackService sql injection

    A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /MultiServerBackService?path=1. The manipulation of the argument fileId leads to sql injection. The attack may be lau…