DigiWin

Products

ProductCVEsExploitedLatest
EasyFlow .NET15–Sep 30, 2026
EasyFlow GP3–Nov 17, 2025
EasyFlow AiNet2–Nov 3, 2025
ERP2–Mar 24, 2025
EAI1–Jul 21, 2025
SFT1–Jul 21, 2025

Exploited and recent CVEs

  • CVE-2026-102459 Medium 6.1 DigiWin|EasyFlow .NET - Reflected Cross-site Scripting 0.2%
  • CVE-2026-102458 Critical 9.8 DigiWin|EasyFlow .NET - Missing Authentication 0.4%
  • CVE-2026-102457 Medium 6.5 DigiWin|EasyFlow .NET - Arbitrary File Read 0.4%
  • CVE-2026-102456 Medium 6.5 DigiWin|EasyFlow .NET - SQL Injection 0.3%
  • CVE-2026-102455 Critical 9.8 DigiWin|EasyFlow .NET - Insecure Deserialization 0.5%
  • CVE-2026-102454 High 7.2 DigiWin|EasyFlow .NET - Arbitrary File Upload 0.6%
  • CVE-2026-12581 High 7.5 Digiwin|EasyFlow .NET - Session Fixation 0.5%
  • CVE-2026-12580 Medium 5.4 Digiwin|EasyFlow .NET - Stored Cross-Site Scripting 0.3%
  • CVE-2026-5964 Critical 9.8 Digiwin|EasyFlow .NET - SQL Injection 0.4%
  • CVE-2026-5963 Critical 9.8 Digiwin|EasyFlow .NET - SQL Injection 0.4%
  • CVE-2025-13165 High 7.5 Digiwin|EasyFlow GP - Denial of service 0.4%
  • CVE-2025-13164 Medium 4.9 Digiwin|EasyFlow GP - Insufficiently Protected Credentials 0.4%
  • CVE-2025-13163 Medium 4.9 Digiwin|EasyFlow GP - Insufficiently Protected Credentials 0.4%
  • CVE-2025-12503 Medium 6.5 Digiwin|EasyFlow .NET and EasyFlow AiNet 0.3%
  • CVE-2025-12503 Medium 6.5 Digiwin|EasyFlow .NET and EasyFlow AiNet 0.3%
  • CVE-2025-11949 High 7.5 Digiwin|EasyFlow .NET and EasyFlow AiNet - Missing Authentication 0.4%
  • CVE-2025-11949 High 7.5 Digiwin|EasyFlow .NET and EasyFlow AiNet - Missing Authentication 0.4%
  • CVE-2025-7344 High 8.8 Digiwin|EAI - Privilege Escalation 0.6%
  • CVE-2025-7343 Critical 9.8 Digiwin|SFT - SQL Injection 0.7%
  • CVE-2025-2706 Medium 6.3 Digiwin ERP UploadAjaxAPI.ashx unrestricted upload 0.3%
  • CVE-2025-2705 High 7.3 Digiwin ERP FileUploadApi.ashx DoWebUpload unrestricted upload 0.5%
  • CVE-2024-7323 Medium 6.5 Digiwin EasyFlow .NET - Arbitrary File Download 0.6%
  • CVE-2024-5311 Critical 9.8 DigiWin EasyFlow .NET - SQL Injection 0.6%
  • CVE-2024-4893 Critical 9.8 DigiWin EasyFlow .NET - SQL Injection 0.8%