Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CDG — Vulnerabilities & Security Advisories 50

All 50 CVE vulnerabilities found in CDG, with AI-generated Chinese analysis, references, and POCs.

This page aggregates Common Weakness Enumeration (CWE) vulnerabilities associated with the CDG product and its related components. It serves as a centralized resource for tracking security issues specific to this vendor’s technology stack without focusing on individual vendor-specific identifiers. The content collected here spans a comprehensive historical range, capturing reported weaknesses from initial disclosures up to the present day. This ensures that users have access to both legacy issues that may still be relevant in older deployments and recent findings affecting current versions. The data includes a wide variety of weakness types, ranging from injection flaws and buffer overflows to logic errors and misconfigurations that have been identified within the CDG ecosystem. By utilizing this aggregation page, users can efficiently track a vendor’s advisories as they are released, providing real-time visibility into emerging threats. It also allows security teams to understand a weakness class in the context of specific software, revealing patterns that might not be apparent when viewing isolated reports. Additionally, users can look up a product's vulnerability history to assess long-term security posture and prioritize remediation efforts based on historical trends. This holistic view supports informed decision-making for risk management and compliance audits, ensuring that all stakeholders have a clear and unified understanding of the security landscape surrounding CDG.

Vendor: ESAFENET

CVE ID Title CVSS Severity Published
CVE-2024-10594 ESAFENET CDG FileDirectoryService.java docHistory sql injection CWE-89 6.3 Medium 2024-10-31
CVE-2024-10502 ESAFENET CDG FileDirectoryService.java getOneFileDirectory sql injection CWE-89 6.3 Medium 2024-10-30
CVE-2024-10501 ESAFENET CDG ExamCDGDocService.java findById sql injection CWE-89 6.3 Medium 2024-10-30
CVE-2024-10500 ESAFENET CDG HookWhiteListService.java sql injection CWE-89 6.3 Medium 2024-10-30
CVE-2024-10379 ESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversal CWE-24 4.3 Medium 2024-10-25
CVE-2024-10378 ESAFENET CDG CDGRenewApplicationService.java actionViewCDGRenewFile sql injection CWE-89 6.3 Medium 2024-10-25
CVE-2024-10377 ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injection CWE-89 6.3 Medium 2024-10-25
CVE-2024-10376 ESAFENET CDG AutoSignService.java actionPassOrNotAutoSign sql injection CWE-89 6.3 Medium 2024-10-25
CVE-2024-10279 ESAFENET CDG PrintPolicyService.java sql injection CWE-89 6.3 Medium 2024-10-23
CVE-2024-10278 ESAFENET CDG ReUserOrganiseService.java sql injection CWE-89 6.3 Medium 2024-10-23
CVE-2024-10277 ESAFENET CDG UsbKeyAjax.java sql injection CWE-89 6.3 Medium 2024-10-23
CVE-2024-10135 ESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injection CWE-89 6.3 Medium 2024-10-19
CVE-2024-10134 ESAFENET CDG MultiServerAjax.java connectLogout sql injection CWE-89 6.3 Medium 2024-10-19
CVE-2024-10133 ESAFENET CDG NetSecPolicyAjax.java updateNetSecPolicyPriority sql injection CWE-89 6.3 Medium 2024-10-19
CVE-2024-10072 ESAFENET CDG EncryptPolicyService.java actionAddEncryptPolicyGroup sql injection CWE-89 6.3 Medium 2024-10-17
CVE-2024-10071 ESAFENET CDG EncryptPolicyService.java actionUpdateEncryptPolicyEdit sql injection CWE-89 6.3 Medium 2024-10-17
CVE-2024-10070 ESAFENET CDG PolicyPushControlAction.java actionPolicyPush sql injection CWE-89 6.3 Medium 2024-10-17
CVE-2024-10069 ESAFENET CDG MailDecryptApplicationService.java actionPassMainApplication sql injection CWE-89 6.3 Medium 2024-10-17
CVE-2024-9560 ESAFENET CDG Catelogs;logindojojs delCatelogs sql injection CWE-89 6.3 Medium 2024-10-06
CVE-2024-9536 ESAFENET CDG MultiServerBackService sql injection CWE-89 6.3 Medium 2024-10-05

All 50 known CVE vulnerabilities affecting CDG with full Chinese analysis, references, and POCs where available.