Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CDG — Vulnerabilities & Security Advisories 50

All 50 CVE vulnerabilities found in CDG, with AI-generated Chinese analysis, references, and POCs.

This page aggregates Common Weakness Enumeration (CWE) vulnerabilities associated with the CDG product and its related components. It serves as a centralized resource for tracking security issues specific to this vendor’s technology stack without focusing on individual vendor-specific identifiers. The content collected here spans a comprehensive historical range, capturing reported weaknesses from initial disclosures up to the present day. This ensures that users have access to both legacy issues that may still be relevant in older deployments and recent findings affecting current versions. The data includes a wide variety of weakness types, ranging from injection flaws and buffer overflows to logic errors and misconfigurations that have been identified within the CDG ecosystem. By utilizing this aggregation page, users can efficiently track a vendor’s advisories as they are released, providing real-time visibility into emerging threats. It also allows security teams to understand a weakness class in the context of specific software, revealing patterns that might not be apparent when viewing isolated reports. Additionally, users can look up a product's vulnerability history to assess long-term security posture and prioritize remediation efforts based on historical trends. This holistic view supports informed decision-making for risk management and compliance audits, ensuring that all stakeholders have a clear and unified understanding of the security landscape surrounding CDG.

Vendor: ESAFENET

CVE ID Title CVSS Severity Published
CVE-2026-18859 ESAFENET CDG usbkey;logindojojs sql injection CWE-89 7.3 High 2026-08-05
CVE-2025-3401 ESAFENET CDG getLimitIPList.jsp sql injection CWE-89 7.3 High 2025-04-08
CVE-2025-3400 ESAFENET CDG UnChkMailApplication.jsp sql injection CWE-89 7.3 High 2025-04-08
CVE-2025-3399 ESAFENET CDG updateNotice.jsp sql injection CWE-89 7.3 High 2025-04-08
CVE-2025-3003 ESAFENET CDG UserAjax sql injection CWE-89 6.3 Medium 2025-03-31
CVE-2025-2927 ESAFENET CDG getFileTypeList.jsp sql injection CWE-89 7.3 High 2025-03-28
CVE-2025-1844 ESAFENET CDG backupLogDetail.jsp sql injection CWE-89 6.3 Medium 2025-03-03
CVE-2025-1841 ESAFENET CDG ClientSortLog.jsp sql injection CWE-89 7.3 High 2025-03-03
CVE-2025-1840 ESAFENET CDG updateorg.jsp sql injection CWE-89 7.3 High 2025-03-02
CVE-2025-1158 ESAFENET CDG addPolicyToSafetyGroup.jsp sql injection CWE-89 6.3 Medium 2025-02-10
CVE-2025-0795 ESAFENET CDG todolistjump.jsp cross site scripting CWE-79 3.5 Low 2025-01-29
CVE-2025-0794 ESAFENET CDG todoDetail.jsp cross site scripting CWE-79 3.5 Low 2025-01-29
CVE-2025-0793 ESAFENET CDG todoDetail.jsp sql injection CWE-89 6.3 Medium 2025-01-29
CVE-2025-0792 ESAFENET CDG sdTodoDetail.jsp sql injection CWE-89 6.3 Medium 2025-01-29
CVE-2025-0791 ESAFENET CDG sdDoneDetail.jsp sql injection CWE-89 6.3 Medium 2025-01-28
CVE-2025-0790 ESAFENET CDG doneDetail.jsp cross site scripting CWE-79 3.5 Low 2025-01-28
CVE-2025-0789 ESAFENET CDG doneDetail.jsp sql injection CWE-89 6.3 Medium 2025-01-28
CVE-2025-0788 ESAFENET CDG content_top.jsp sql injection CWE-89 6.3 Medium 2025-01-28
CVE-2025-0787 ESAFENET CDG appDetail.jsp cross site scripting CWE-79 3.5 Low 2025-01-28
CVE-2025-0786 ESAFENET CDG appDetail.jsp sql injection CWE-89 6.3 Medium 2025-01-28
CVE-2025-0785 ESAFENET CDG SysConfig.jsp cross site scripting CWE-79 3.5 Low 2025-01-28
CVE-2024-10660 ESAFENET CDG HookService.java deleteHook sql injection CWE-89 6.3 Medium 2024-11-01
CVE-2024-10659 ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection CWE-89 6.3 Medium 2024-11-01
CVE-2024-10613 ESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy sql injection CWE-89 6.3 Medium 2024-11-01
CVE-2024-10612 ESAFENET CDG HookInvalidCourseService.java removeHookInvalidCourse sql injection CWE-89 6.3 Medium 2024-11-01
CVE-2024-10611 ESAFENET CDG PrintScreenListService.java delProtocol sql injection CWE-89 6.3 Medium 2024-11-01
CVE-2024-10610 ESAFENET CDG ProtocolService.java delProtocol sql injection CWE-89 6.3 Medium 2024-11-01
CVE-2024-10597 ESAFENET CDG PolicyActionService.java delPolicyAction sql injection CWE-89 6.3 Medium 2024-10-31
CVE-2024-10596 ESAFENET CDG EncryptPolicyTypeService.java delEntryptPolicySort sql injection CWE-89 6.3 Medium 2024-10-31
CVE-2024-10595 ESAFENET CDG PublicDocInfoAjax.java delDifferCourseList sql injection CWE-89 6.3 Medium 2024-10-31

All 50 known CVE vulnerabilities affecting CDG with full Chinese analysis, references, and POCs where available.