https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3401.htmlhttps://patchthecve.com/cve/CVE-2025-3401.htmlWed, 17 Jun 2026 09:19:53 +0000HIGH 7.3: A vulnerability has been found in ESAFENET CDG 5.6.3.154.205_20250114 and classified as critical. This vulnerability affects unknown code of the file /parameter/getLimitIPList.jsp. The manipulation of the argument noticeId leads to sql injection. The attack can be initiated remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-3400.htmlhttps://patchthecve.com/cve/CVE-2025-3400.htmlWed, 17 Jun 2026 09:19:53 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. This affects an unknown part of the file /client/UnChkMailApplication.jsp. The manipulation of the argument typename leads to sql injection. It is possible to initiate the attack remotely. The exploihttps://patchthecve.com/cve/CVE-2025-3399.htmlhttps://patchthecve.com/cve/CVE-2025-3399.htmlWed, 17 Jun 2026 09:19:53 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5.6.3.154.205_20250114. Affected by this issue is some unknown functionality of the file /pubinfo/updateNotice.jsp. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The ehttps://patchthecve.com/cve/CVE-2025-2927.htmlhttps://patchthecve.com/cve/CVE-2025-2927.htmlWed, 17 Jun 2026 09:07:52 +0000HIGH 7.3: A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been classified as critical. Affected is an unknown function of the file /parameter/getFileTypeList.jsp. The manipulation of the argument typename leads to sql injection. It is possible to launch the attack remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-1844.htmlhttps://patchthecve.com/cve/CVE-2025-1844.htmlWed, 17 Jun 2026 08:39:52 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack remothttps://patchthecve.com/cve/CVE-2025-1841.htmlhttps://patchthecve.com/cve/CVE-2025-1841.htmlWed, 17 Jun 2026 08:39:52 +0000HIGH 7.3: A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The exhttps://patchthecve.com/cve/CVE-2025-1840.htmlhttps://patchthecve.com/cve/CVE-2025-1840.htmlWed, 17 Jun 2026 08:39:52 +0000HIGH 7.3: A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched remotehttps://patchthecve.com/cve/CVE-2025-0795.htmlhttps://patchthecve.com/cve/CVE-2025-0795.htmlWed, 17 Jun 2026 08:27:09 +0000LOW 3.5: A vulnerability was found in ESAFENET CDG V5. It has been classified as problematic. This affects an unknown part of the file /todolistjump.jsp. The manipulation of the argument flowId leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to thhttps://patchthecve.com/cve/CVE-2025-0794.htmlhttps://patchthecve.com/cve/CVE-2025-0794.htmlWed, 17 Jun 2026 08:27:09 +0000LOW 3.5: A vulnerability was found in ESAFENET CDG V5 and classified as problematic. Affected by this issue is some unknown functionality of the file /todoDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed tohttps://patchthecve.com/cve/CVE-2025-0793.htmlhttps://patchthecve.com/cve/CVE-2025-0793.htmlWed, 17 Jun 2026 08:27:08 +0000MEDIUM 6.3: A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /todoDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed tohttps://patchthecve.com/cve/CVE-2025-0792.htmlhttps://patchthecve.com/cve/CVE-2025-0792.htmlWed, 17 Jun 2026 08:27:08 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public ahttps://patchthecve.com/cve/CVE-2025-0791.htmlhttps://patchthecve.com/cve/CVE-2025-0791.htmlWed, 17 Jun 2026 08:27:08 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the https://patchthecve.com/cve/CVE-2025-0790.htmlhttps://patchthecve.com/cve/CVE-2025-0790.htmlWed, 17 Jun 2026 08:27:08 +0000LOW 3.5: A vulnerability classified as problematic was found in ESAFENET CDG V5. This vulnerability affects unknown code of the file /doneDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and https://patchthecve.com/cve/CVE-2025-0789.htmlhttps://patchthecve.com/cve/CVE-2025-0789.htmlWed, 17 Jun 2026 08:27:08 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in ESAFENET CDG V5. This affects an unknown part of the file /doneDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be https://patchthecve.com/cve/CVE-2025-0788.htmlhttps://patchthecve.com/cve/CVE-2025-0788.htmlWed, 17 Jun 2026 08:27:08 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /content_top.jsp. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the publihttps://patchthecve.com/cve/CVE-2025-0787.htmlhttps://patchthecve.com/cve/CVE-2025-0787.htmlWed, 17 Jun 2026 08:27:08 +0000LOW 3.5: A vulnerability was found in ESAFENET CDG V5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /appDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack can be launched remotely. The exploit has been https://patchthecve.com/cve/CVE-2025-0786.htmlhttps://patchthecve.com/cve/CVE-2025-0786.htmlWed, 17 Jun 2026 08:27:08 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG V5. It has been classified as critical. Affected is an unknown function of the file /appDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public andhttps://patchthecve.com/cve/CVE-2025-0785.htmlhttps://patchthecve.com/cve/CVE-2025-0785.htmlWed, 17 Jun 2026 08:27:07 +0000LOW 3.5: A vulnerability was found in ESAFENET CDG V5 and classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public ahttps://patchthecve.com/cve/CVE-2024-10660.htmlhttps://patchthecve.com/cve/CVE-2024-10660.htmlWed, 17 Jun 2026 06:56:08 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function deleteHook of the file /com/esafenet/servlet/policy/HookService.java. The manipulation of the argument hookId leads to sql injection. It is possible to initiate the attack remotely. The exploit https://patchthecve.com/cve/CVE-2024-10659.htmlhttps://patchthecve.com/cve/CVE-2024-10659.htmlWed, 17 Jun 2026 06:56:08 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/document/CDGAuthoriseTempletService.java. The manipulation of the argument id leads to sql injection. The attack may behttps://patchthecve.com/cve/CVE-2024-10613.htmlhttps://patchthecve.com/cve/CVE-2024-10613.htmlWed, 17 Jun 2026 06:56:03 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delSystemEncryptPolicy of the file /com/esafenet/servlet/system/SystemEncryptPolicyService.java. The manipulation of the argument id leads to sql injection. The attack can behttps://patchthecve.com/cve/CVE-2024-10612.htmlhttps://patchthecve.com/cve/CVE-2024-10612.htmlWed, 17 Jun 2026 06:56:02 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function removeHookInvalidCourse of the file /com/esafenet/servlet/system/HookInvalidCourseService.java. The manipulation of the argument id leads to sql injection. It is possible to launch the attack rehttps://patchthecve.com/cve/CVE-2024-10611.htmlhttps://patchthecve.com/cve/CVE-2024-10611.htmlWed, 17 Jun 2026 06:56:02 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5 and classified as critical. This issue affects the function delProtocol of the file /com/esafenet/servlet/system/PrintScreenListService.java. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has https://patchthecve.com/cve/CVE-2024-10610.htmlhttps://patchthecve.com/cve/CVE-2024-10610.htmlWed, 17 Jun 2026 06:56:02 +0000MEDIUM 6.3: A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function delProtocol of the file /com/esafenet/servlet/system/ProtocolService.java. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploihttps://patchthecve.com/cve/CVE-2024-10597.htmlhttps://patchthecve.com/cve/CVE-2024-10597.htmlWed, 17 Jun 2026 06:56:00 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploihttps://patchthecve.com/cve/CVE-2024-10596.htmlhttps://patchthecve.com/cve/CVE-2024-10596.htmlWed, 17 Jun 2026 06:56:00 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function delEntryptPolicySort of the file /com/esafenet/servlet/system/EncryptPolicyTypeService.java. The manipulation of the argument id leads to sql injection. The attack may be launched remothttps://patchthecve.com/cve/CVE-2024-10595.htmlhttps://patchthecve.com/cve/CVE-2024-10595.htmlWed, 17 Jun 2026 06:56:00 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. The ehttps://patchthecve.com/cve/CVE-2024-10594.htmlhttps://patchthecve.com/cve/CVE-2024-10594.htmlWed, 17 Jun 2026 06:56:00 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument fileId leads to sql injection. It is possible to launch the attack remotelhttps://patchthecve.com/cve/CVE-2024-10502.htmlhttps://patchthecve.com/cve/CVE-2024-10502.htmlWed, 17 Jun 2026 06:55:48 +0000MEDIUM 6.3: A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function getOneFileDirectory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument directoryId leads to sql injection. The attack can be https://patchthecve.com/cve/CVE-2024-10501.htmlhttps://patchthecve.com/cve/CVE-2024-10501.htmlWed, 17 Jun 2026 06:55:48 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function findById of the file /com/esafenet/servlet/document/ExamCDGDocService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploihttps://patchthecve.com/cve/CVE-2024-10500.htmlhttps://patchthecve.com/cve/CVE-2024-10500.htmlWed, 17 Jun 2026 06:55:48 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/policy/HookWhiteListService.java. The manipulation of the argument policyId leads to sql injection. The attack may be launched rhttps://patchthecve.com/cve/CVE-2024-48343.htmlhttps://patchthecve.com/cve/CVE-2024-48343.htmlWed, 17 Jun 2026 07:58:26 +0000MEDIUM 6.3: A SQL Injection vulnerability in ESAFENET CDG 5 and earlier allows an attacker to execute arbitrary code via the id parameter of the dataSearch.jsp page.https://patchthecve.com/cve/CVE-2024-10379.htmlhttps://patchthecve.com/cve/CVE-2024-10379.htmlWed, 17 Jun 2026 06:55:31 +0000MEDIUM 4.3: A vulnerability classified as problematic was found in ESAFENET CDG 5. Affected by this vulnerability is the function actionViewDecyptFile of the file /com/esafenet/servlet/client/DecryptApplicationService.java. The manipulation of the argument decryptFileId with the input ../../../Windows/System32/https://patchthecve.com/cve/CVE-2024-10378.htmlhttps://patchthecve.com/cve/CVE-2024-10378.htmlWed, 17 Jun 2026 06:55:31 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in ESAFENET CDG 5. Affected is the function actionViewCDGRenewFile of the file /com/esafenet/servlet/client/CDGRenewApplicationService.java. The manipulation of the argument CDGRenewFileId leads to sql injection. It is possible to launch the attahttps://patchthecve.com/cve/CVE-2024-10377.htmlhttps://patchthecve.com/cve/CVE-2024-10377.htmlWed, 17 Jun 2026 06:55:30 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. This issue affects the function actionPassDecryptApplication1 of the file /com/esafenet/servlet/client/DecryptApplicationService.java. The manipulation of the argument id leads to sql injection. The attack may be initiated rhttps://patchthecve.com/cve/CVE-2024-10376.htmlhttps://patchthecve.com/cve/CVE-2024-10376.htmlWed, 17 Jun 2026 06:55:30 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects the function actionPassOrNotAutoSign of the file /com/esafenet/servlet/service/processsign/AutoSignService.java. The manipulation of the argument UniqueId leads to sql injection. The attack can https://patchthecve.com/cve/CVE-2024-10279.htmlhttps://patchthecve.com/cve/CVE-2024-10279.htmlWed, 17 Jun 2026 06:55:19 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code of the file /com/esafenet/servlet/policy/PrintPolicyService.java. The manipulation of the argument policyId leads to sql injection. The attack can be initiated remotely. The exploithttps://patchthecve.com/cve/CVE-2024-10278.htmlhttps://patchthecve.com/cve/CVE-2024-10278.htmlWed, 17 Jun 2026 06:55:19 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the file /com/esafenet/servlet/user/ReUserOrganiseService.java. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploithttps://patchthecve.com/cve/CVE-2024-10277.htmlhttps://patchthecve.com/cve/CVE-2024-10277.htmlWed, 17 Jun 2026 06:55:19 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is some unknown functionality of the file /com/esafenet/servlet/ajax/UsbKeyAjax.java. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2024-10135.htmlhttps://patchthecve.com/cve/CVE-2024-10135.htmlWed, 17 Jun 2026 06:54:59 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects the function actionDelNetSecConfig of the file /com/esafenet/servlet/netSec/NetSecConfigService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotehttps://patchthecve.com/cve/CVE-2024-10134.htmlhttps://patchthecve.com/cve/CVE-2024-10134.htmlWed, 17 Jun 2026 06:54:59 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5 and classified as critical. Affected by this issue is the function connectLogout of the file /com/esafenet/servlet/ajax/MultiServerAjax.java. The manipulation of the argument servername leads to sql injection. The attack may be launched remotely. The explohttps://patchthecve.com/cve/CVE-2024-10133.htmlhttps://patchthecve.com/cve/CVE-2024-10133.htmlWed, 17 Jun 2026 06:54:58 +0000MEDIUM 6.3: A vulnerability has been found in ESAFENET CDG 5 and classified as critical. Affected by this vulnerability is the function updateNetSecPolicyPriority of the file /com/esafenet/servlet/ajax/NetSecPolicyAjax.java. The manipulation of the argument id/frontId leads to sql injection. The attack can be lhttps://patchthecve.com/cve/CVE-2024-10072.htmlhttps://patchthecve.com/cve/CVE-2024-10072.htmlWed, 17 Jun 2026 06:54:51 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. This issue affects the function actionAddEncryptPolicyGroup of the file /com/esafenet/servlet/policy/EncryptPolicyService.java. The manipulation of the argument checklist leads to sql injection. The attack may be inhttps://patchthecve.com/cve/CVE-2024-10071.htmlhttps://patchthecve.com/cve/CVE-2024-10071.htmlWed, 17 Jun 2026 06:54:51 +0000MEDIUM 6.3: A vulnerability classified as critical was found in ESAFENET CDG 5. This vulnerability affects the function actionUpdateEncryptPolicyEdit of the file /com/esafenet/servlet/policy/EncryptPolicyService.java. The manipulation of the argument encryptPolicyId leads to sql injection. The attack can be inihttps://patchthecve.com/cve/CVE-2024-10070.htmlhttps://patchthecve.com/cve/CVE-2024-10070.htmlWed, 17 Jun 2026 06:54:51 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function actionPolicyPush of the file /com/esafenet/policy/action/PolicyPushControlAction.java. The manipulation of the argument policyId leads to sql injection. It is possible to initiate the attack remotely. https://patchthecve.com/cve/CVE-2024-10069.htmlhttps://patchthecve.com/cve/CVE-2024-10069.htmlWed, 17 Jun 2026 06:54:51 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function actionPassMainApplication of the file /com/esafenet/servlet/client/MailDecryptApplicationService.java. The manipulation of the argument id leads to sql injection. The attack may be launhttps://patchthecve.com/cve/CVE-2024-9560.htmlhttps://patchthecve.com/cve/CVE-2024-9560.htmlWed, 17 Jun 2026 08:24:49 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is the function delCatelogs of the file /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. https://patchthecve.com/cve/CVE-2024-9536.htmlhttps://patchthecve.com/cve/CVE-2024-9536.htmlWed, 17 Jun 2026 08:24:46 +0000MEDIUM 6.3: A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /MultiServerBackService?path=1. The manipulation of the argument fileId leads to sql injection. The attack may be launched remotely. The exploit has been dischttps://patchthecve.com/cve/CVE-2024-46510.htmlhttps://patchthecve.com/cve/CVE-2024-46510.htmlWed, 17 Jun 2026 07:55:28 +0000HIGH 7.6: ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interfacehttps://patchthecve.com/cve/CVE-2024-42885.htmlhttps://patchthecve.com/cve/CVE-2024-42885.htmlWed, 17 Jun 2026 07:50:05 +0000CRITICAL 9.1: SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page.