SFT vulnerabilities

1 known vulnerability in SFT from DigiWin. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  SFT: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-7343Jul 21, 2025DigiWin

  The SFT developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.