Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

DigiWin — Vulnerabilities & Security Advisories 22

Browse all 22 CVE security advisories affecting DigiWin. AI-powered Chinese analysis, POCs, and references for each vulnerability.

DigiWin develops digital transformation solutions with a core focus on enterprise resource planning systems. Historically, the organization's products have been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its 14 recorded CVEs. Security researchers have identified authentication bypass weaknesses and insufficient input validation as recurring problems in their software architecture. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities in their enterprise applications suggests a need for enhanced secure coding practices and regular security assessments to mitigate potential exploitation risks.

CVE ID Title CVSS Severity Published
CVE-2026-102459 DigiWin|EasyFlow .NET - Reflected Cross-site Scripting — EasyFlow .NET CWE-79 6.1 Medium 2026-09-30
CVE-2026-102458 DigiWin|EasyFlow .NET - Missing Authentication — EasyFlow .NET CWE-306 9.8 Critical 2026-09-30
CVE-2026-102457 DigiWin|EasyFlow .NET - Arbitrary File Read — EasyFlow .NET CWE-22 6.5 Medium 2026-09-30
CVE-2026-102456 DigiWin|EasyFlow .NET - SQL Injection — EasyFlow .NET CWE-89 6.5 Medium 2026-09-30
CVE-2026-102455 DigiWin|EasyFlow .NET - Insecure Deserialization — EasyFlow .NET CWE-502 9.8 Critical 2026-09-30
CVE-2026-102454 DigiWin|EasyFlow .NET - Arbitrary File Upload — EasyFlow .NET CWE-434 7.2 High 2026-09-30
CVE-2026-12581 Digiwin|EasyFlow .NET - Session Fixation — EasyFlow .NET CWE-384 7.5 High 2026-06-22
CVE-2026-12580 Digiwin|EasyFlow .NET - Stored Cross-Site Scripting — EasyFlow .NET CWE-79 5.4 Medium 2026-06-22
CVE-2026-5964 Digiwin|EasyFlow .NET - SQL Injection — EasyFlow .NET CWE-89 9.8 Critical 2026-04-20
CVE-2026-5963 Digiwin|EasyFlow .NET - SQL Injection — EasyFlow .NET CWE-89 9.8 Critical 2026-04-20
CVE-2025-13165 Digiwin|EasyFlow GP - Denial of service — EasyFlow GP CWE-770 7.5 High 2025-11-17
CVE-2025-13164 Digiwin|EasyFlow GP - Insufficiently Protected Credentials — EasyFlow GP CWE-522 4.9 Medium 2025-11-17
CVE-2025-13163 Digiwin|EasyFlow GP - Insufficiently Protected Credentials — EasyFlow GP CWE-522 4.9 Medium 2025-11-17
CVE-2025-12503 Digiwin|EasyFlow .NET and EasyFlow AiNet — EasyFlow .NET CWE-89 6.5 Medium 2025-11-03
CVE-2025-11949 Digiwin|EasyFlow .NET and EasyFlow AiNet - Missing Authentication — EasyFlow .NET CWE-306 7.5 High 2025-10-21
CVE-2025-7344 Digiwin|EAI - Privilege Escalation — EAI CWE-648 8.8 High 2025-07-21
CVE-2025-7343 Digiwin|SFT - SQL Injection — SFT CWE-89 9.8 Critical 2025-07-21
CVE-2025-2706 Digiwin ERP UploadAjaxAPI.ashx unrestricted upload — ERP CWE-434 6.3 Medium 2025-03-24
CVE-2025-2705 Digiwin ERP FileUploadApi.ashx DoWebUpload unrestricted upload — ERP CWE-434 7.3 High 2025-03-24
CVE-2024-7323 Digiwin EasyFlow .NET - Arbitrary File Download — EasyFlow .NET CWE-36 6.5 Medium 2024-08-02
CVE-2024-5311 DigiWin EasyFlow .NET - SQL Injection — EasyFlow .NET CWE-89 9.8 Critical 2024-06-03
CVE-2024-4893 DigiWin EasyFlow .NET - SQL Injection — EasyFlow .NET CWE-89 9.8 Critical 2024-05-15

This page lists every published CVE security advisory associated with DigiWin. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.