Esafenet vulnerabilities
We track 44 vulnerabilities in Esafenet products across 2 products. 44 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
Latest Esafenet vulnerabilities
- 7.3 High severity
CDG: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such manipulation of the argument keyid leads to sql injection. The attack may be performed from remote. The exploit
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in ESAFENET CDG 5.6.3.154.205_20250114 and classified as critical. This vulnerability affects unknown code of the file /parameter/getLimitIPList.jsp. The manipulation of the argument noticeId leads to sql injection. The attack ca
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. This affects an unknown part of the file /client/UnChkMailApplication.jsp. The manipulation of the argument typename leads to sql injection. It is possible to
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5.6.3.154.205_20250114. Affected by this issue is some unknown functionality of the file /pubinfo/updateNotice.jsp. The manipulation of the argument ID leads to sql injection. Th
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been classified as critical. Affected is an unknown function of the file /parameter/getFileTypeList.jsp. The manipulation of the argument typename leads to sql injection. It is possible to launch
- 9.8 Critical severity
DSM: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in ESAFENET DSM 3.1.2 and classified as critical. Affected by this vulnerability is the function examExportPDF of the file /admin/plan/examExportPDF. The manipulation of the argument s leads to command injection. The attack can b
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. I
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql inje
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /todoDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack can be launched rem
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The ex
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotely
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to initiate the attack remotely. The exploit has
- 8.8 High severity
CDG: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /content_top.jsp. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The
- 8.8 High severity
CDG: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The expl
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function deleteHook of the file /com/esafenet/servlet/policy/HookService.java. The manipulation of the argument hookId leads to sql injection. It is possible to in
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/document/CDGAuthoriseTempletService.java. The manipulation of the argument id l
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/system/SystemEncryptPolicyService.java. The manipulation of the argument id l
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function removeHookInvalidCourse of the file /com/esafenet/servlet/system/HookInvalidCourseService.java. The manipulation of the argument id leads to sql injection
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5 and classified as critical. This issue affects the function delProtocol of the file /com/esafenet/servlet/system/PrintScreenListService.java. The manipulation of the argument id leads to sql injection. The attack may
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function delProtocol of the file /com/esafenet/servlet/system/ProtocolService.java. The manipulation of the argument id leads to sql injection. The atta
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to sql injection. It is possible to
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function delEntryptPolicySort of the file /com/esafenet/servlet/system/EncryptPolicyTypeService.java. The manipulation of the argument id leads to sql inj
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. Th
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument fileId leads to sql injection. It
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function getOneFileDirectory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument directoryId le
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function findById of the file /com/esafenet/servlet/document/ExamCDGDocService.java. The manipulation of the argument id leads to sql injection. It is possible to
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/policy/HookWhiteListService.java. The manipulation of the argument policyId leads to sql
- 7.5 High severity
CDG: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability classified as problematic was found in ESAFENET CDG 5. Affected by this vulnerability is the function actionViewDecyptFile of the file /com/esafenet/servlet/client/DecryptApplicationService.java. The manipulation of the argument decryptFileId w
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in ESAFENET CDG 5. Affected is the function actionViewCDGRenewFile of the file /com/esafenet/servlet/client/CDGRenewApplicationService.java. The manipulation of the argument CDGRenewFileId leads to sql inje
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. This issue affects the function actionPassDecryptApplication1 of the file /com/esafenet/servlet/client/DecryptApplicationService.java. The manipulation of the argument id leads to sql
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects the function actionPassOrNotAutoSign of the file /com/esafenet/servlet/service/processsign/AutoSignService.java. The manipulation of the argument UniqueId
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code of the file /com/esafenet/servlet/policy/PrintPolicyService.java. The manipulation of the argument policyId leads to sql injection. The attac
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the file /com/esafenet/servlet/user/ReUserOrganiseService.java. The manipulation of the argument userId leads to sql injection. It is possible to i
- 9.8 Critical severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/ajax/UsbKeyAjax.java. The manipulation of the argument id leads to sql injection. The attack may be l
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The manipulation of the argument id leads to sql injection. It i
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is the function connectLogout of the file /com/esafenet/servlet/ajax/MultiServerAjax.java. The manipulation of the argument servername leads to sql injection. The at
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in ESAFENET CDG 5 and classified as critical. Affected by this vulnerability is the function updateNetSecPolicyPriority of the file /com/esafenet/servlet/ajax/NetSecPolicyAjax.java. The manipulation of the argument id/frontId lea
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. This issue affects the function actionAddEncryptPolicyGroup of the file /com/esafenet/servlet/policy/EncryptPolicyService.java. The manipulation of the argument checklist lead
- 8.8 High severity
CDG: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in ESAFENET CDG 5. This vulnerability affects the function actionUpdateEncryptPolicyEdit of the file /com/esafenet/servlet/policy/EncryptPolicyService.java. The manipulation of the argument encryptPolicyId leads