Sangfor Behavior Management System (DC Management System) vulnerabilities

1 known vulnerability in Sangfor Behavior Management System (DC Management System) from Sangfor Technologies. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Sangfor Behavior Management System (DC…: Improper Restriction of XML External Entity Reference

  CVE-2023-7307Aug 27, 2025Sangfor Technologies

  Sangfor Behavior Management System (also referred to as DC Management System in Chinese-language documentation) contains an XML external entity (XXE) injection vulnerability in the /src/sangforindex endpoint. A remote unauthenticated attacker can submit crafte