Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ESAFENET — Vulnerabilities & Security Advisories 51

Browse all 51 CVE security advisories affecting ESAFENET. AI-powered Chinese analysis, POCs, and references for each vulnerability.

ESAFENET operates as a network security solution provider, primarily offering intrusion detection and prevention systems alongside firewall appliances for enterprise environments. Historical analysis of its software reveals a significant accumulation of fifty Common Vulnerabilities and Exposures, predominantly stemming from inadequate input validation and improper access controls. The most frequently exploited flaw classes include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and privilege escalation vulnerabilities, often resulting from legacy codebases lacking rigorous security testing. These defects have allowed attackers to bypass authentication mechanisms or execute arbitrary commands on affected devices. While specific large-scale breaches directly attributed to ESAFENET remain less publicized compared to major vendors, the high volume of disclosed CVEs indicates persistent weaknesses in its development lifecycle. Organizations utilizing these appliances must prioritize immediate patching and network segmentation to mitigate the risk of exploitation inherent in these documented security gaps.

Top products by ESAFENET: CDG DSM
CVE ID Title CVSS Severity Published
CVE-2026-18859 ESAFENET CDG usbkey;logindojojs sql injection — CDG CWE-89 7.3 High 2026-08-05
CVE-2025-3401 ESAFENET CDG getLimitIPList.jsp sql injection — CDG CWE-89 7.3 High 2025-04-08
CVE-2025-3400 ESAFENET CDG UnChkMailApplication.jsp sql injection — CDG CWE-89 7.3 High 2025-04-08
CVE-2025-3399 ESAFENET CDG updateNotice.jsp sql injection — CDG CWE-89 7.3 High 2025-04-08
CVE-2025-3003 ESAFENET CDG UserAjax sql injection — CDG CWE-89 6.3 Medium 2025-03-31
CVE-2025-2927 ESAFENET CDG getFileTypeList.jsp sql injection — CDG CWE-89 7.3 High 2025-03-28
CVE-2025-1845 ESAFENET DSM examExportPDF command injection — DSM CWE-77 6.3 Medium 2025-03-03
CVE-2025-1844 ESAFENET CDG backupLogDetail.jsp sql injection — CDG CWE-89 6.3 Medium 2025-03-03
CVE-2025-1841 ESAFENET CDG ClientSortLog.jsp sql injection — CDG CWE-89 7.3 High 2025-03-03
CVE-2025-1840 ESAFENET CDG updateorg.jsp sql injection — CDG CWE-89 7.3 High 2025-03-02
CVE-2025-1158 ESAFENET CDG addPolicyToSafetyGroup.jsp sql injection — CDG CWE-89 6.3 Medium 2025-02-10
CVE-2025-0795 ESAFENET CDG todolistjump.jsp cross site scripting — CDG CWE-79 3.5 Low 2025-01-29
CVE-2025-0794 ESAFENET CDG todoDetail.jsp cross site scripting — CDG CWE-79 3.5 Low 2025-01-29
CVE-2025-0793 ESAFENET CDG todoDetail.jsp sql injection — CDG CWE-89 6.3 Medium 2025-01-29
CVE-2025-0792 ESAFENET CDG sdTodoDetail.jsp sql injection — CDG CWE-89 6.3 Medium 2025-01-29
CVE-2025-0791 ESAFENET CDG sdDoneDetail.jsp sql injection — CDG CWE-89 6.3 Medium 2025-01-28
CVE-2025-0790 ESAFENET CDG doneDetail.jsp cross site scripting — CDG CWE-79 3.5 Low 2025-01-28
CVE-2025-0789 ESAFENET CDG doneDetail.jsp sql injection — CDG CWE-89 6.3 Medium 2025-01-28
CVE-2025-0788 ESAFENET CDG content_top.jsp sql injection — CDG CWE-89 6.3 Medium 2025-01-28
CVE-2025-0787 ESAFENET CDG appDetail.jsp cross site scripting — CDG CWE-79 3.5 Low 2025-01-28
CVE-2025-0786 ESAFENET CDG appDetail.jsp sql injection — CDG CWE-89 6.3 Medium 2025-01-28
CVE-2025-0785 ESAFENET CDG SysConfig.jsp cross site scripting — CDG CWE-79 3.5 Low 2025-01-28
CVE-2024-10660 ESAFENET CDG HookService.java deleteHook sql injection — CDG CWE-89 6.3 Medium 2024-11-01
CVE-2024-10659 ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection — CDG CWE-89 6.3 Medium 2024-11-01
CVE-2024-10613 ESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy sql injection — CDG CWE-89 6.3 Medium 2024-11-01
CVE-2024-10612 ESAFENET CDG HookInvalidCourseService.java removeHookInvalidCourse sql injection — CDG CWE-89 6.3 Medium 2024-11-01
CVE-2024-10611 ESAFENET CDG PrintScreenListService.java delProtocol sql injection — CDG CWE-89 6.3 Medium 2024-11-01
CVE-2024-10610 ESAFENET CDG ProtocolService.java delProtocol sql injection — CDG CWE-89 6.3 Medium 2024-11-01
CVE-2024-10597 ESAFENET CDG PolicyActionService.java delPolicyAction sql injection — CDG CWE-89 6.3 Medium 2024-10-31
CVE-2024-10596 ESAFENET CDG EncryptPolicyTypeService.java delEntryptPolicySort sql injection — CDG CWE-89 6.3 Medium 2024-10-31

This page lists every published CVE security advisory associated with ESAFENET. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.