EESAFENET

Products

Exploited and recent CVEs

• CVE-2026-18859 High 7.3 ESAFENET CDG usbkey;logindojojs sql injection 0.4%
• CVE-2025-3401 High 7.3 ESAFENET CDG getLimitIPList.jsp sql injection 0.7%
• CVE-2025-3400 High 7.3 ESAFENET CDG UnChkMailApplication.jsp sql injection 0.7%
• CVE-2025-3399 High 7.3 ESAFENET CDG updateNotice.jsp sql injection 0.7%
• CVE-2025-3003 Medium 6.3 ESAFENET CDG UserAjax sql injection 0.3%
• CVE-2025-2927 High 7.3 ESAFENET CDG getFileTypeList.jsp sql injection 0.6%
• CVE-2025-1845 Medium 6.3 ESAFENET DSM examExportPDF command injection 3.4%
• CVE-2025-1844 Medium 6.3 ESAFENET CDG backupLogDetail.jsp sql injection 0.4%
• CVE-2025-1841 High 7.3 ESAFENET CDG ClientSortLog.jsp sql injection 0.5%
• CVE-2025-1840 High 7.3 ESAFENET CDG updateorg.jsp sql injection 0.5%
• CVE-2025-1158 Medium 6.3 ESAFENET CDG addPolicyToSafetyGroup.jsp sql injection 0.3%
• CVE-2025-0795 Low 3.5 ESAFENET CDG todolistjump.jsp cross site scripting 0.4%
• CVE-2025-0794 Low 3.5 ESAFENET CDG todoDetail.jsp cross site scripting 0.4%
• CVE-2025-0793 Medium 6.3 ESAFENET CDG todoDetail.jsp sql injection 0.6%
• CVE-2025-0792 Medium 6.3 ESAFENET CDG sdTodoDetail.jsp sql injection 0.6%
• CVE-2025-0791 Medium 6.3 ESAFENET CDG sdDoneDetail.jsp sql injection 0.6%
• CVE-2025-0790 Low 3.5 ESAFENET CDG doneDetail.jsp cross site scripting 0.4%
• CVE-2025-0789 Medium 6.3 ESAFENET CDG doneDetail.jsp sql injection 0.5%
• CVE-2025-0788 Medium 6.3 ESAFENET CDG content_top.jsp sql injection 0.4%
• CVE-2025-0787 Low 3.5 ESAFENET CDG appDetail.jsp cross site scripting 0.3%
• CVE-2025-0786 Medium 6.3 ESAFENET CDG appDetail.jsp sql injection 0.4%
• CVE-2025-0785 Low 3.5 ESAFENET CDG SysConfig.jsp cross site scripting 0.3%
• CVE-2024-10660 Medium 6.3 ESAFENET CDG HookService.java deleteHook sql injection 5.3%
• CVE-2024-10659 Medium 6.3 ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection 0.6%
• CVE-2024-10613 Medium 6.3 ESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy sql injection 0.6%
• CVE-2024-10612 Medium 6.3 ESAFENET CDG HookInvalidCourseService.java removeHookInvalidCourse sql injection 0.6%
• CVE-2024-10611 Medium 6.3 ESAFENET CDG PrintScreenListService.java delProtocol sql injection 0.6%
• CVE-2024-10610 Medium 6.3 ESAFENET CDG ProtocolService.java delProtocol sql injection 0.5%
• CVE-2024-10597 Medium 6.3 ESAFENET CDG PolicyActionService.java delPolicyAction sql injection 0.6%
• CVE-2024-10596 Medium 6.3 ESAFENET CDG EncryptPolicyTypeService.java delEntryptPolicySort sql injection 0.6%