Esafenet Cdg vulnerabilities

CVE-2024-46510 [HIGH] CWE-89 CVE-2024-46510: ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the ESAFENET CDG v5 was discovered to contain a SQL injection vulnerability via the id parameter in the NavigationAjax interface

CVE-2024-10660 [CRITICAL] CWE-89 CVE-2024-10660: A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the fun A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function deleteHook of the file /com/esafenet/servlet/policy/HookService.java. The manipulation of the argument hookId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-3400 [CRITICAL] CWE-74 CVE-2025-3400: A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. This affects an unknown part of the file /client/UnChkMailApplication.jsp. The manipulation of the argument typename leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2024-10376 [CRITICAL] CWE-89 CVE-2024-10376: A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability af A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects the function actionPassOrNotAutoSign of the file /com/esafenet/servlet/service/processsign/AutoSignService.java. The manipulation of the argument UniqueId leads to sql injection. The attack can be initiated remotely. The exploit has been disclo

CVE-2024-9536 [CRITICAL] CWE-89 CVE-2024-9536: A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue A vulnerability was found in ESAFENET CDG V5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /MultiServerBackService?path=1. The manipulation of the argument fileId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was c

CVE-2025-0793 [CRITICAL] CWE-74 CVE-2025-0793: A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulne A vulnerability has been found in ESAFENET CDG V5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /todoDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacte

CVE-2025-2927 [CRITICAL] CWE-74 CVE-2025-2927: A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been classified as critical. Affecte A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been classified as critical. Affected is an unknown function of the file /parameter/getFileTypeList.jsp. The manipulation of the argument typename leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendo

CVE-2025-3401 [CRITICAL] CWE-74 CVE-2025-3401: A vulnerability has been found in ESAFENET CDG 5.6.3.154.205_20250114 and classified as critical. Th A vulnerability has been found in ESAFENET CDG 5.6.3.154.205_20250114 and classified as critical. This vulnerability affects unknown code of the file /parameter/getLimitIPList.jsp. The manipulation of the argument noticeId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The v

CVE-2024-10278 [CRITICAL] CWE-89 CVE-2024-10278: A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unk A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. This affects an unknown part of the file /com/esafenet/servlet/user/ReUserOrganiseService.java. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-1844 [CRITICAL] CWE-74 CVE-2025-1844: A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. Affected is an unknown function of the file /CDGServer3/logManagement/backupLogDetail.jsp. The manipulation of the argument logTaskId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public an

CVE-2024-10071 [HIGH] CWE-89 CVE-2024-10071: A vulnerability classified as critical was found in ESAFENET CDG 5. This vulnerability affects the f A vulnerability classified as critical was found in ESAFENET CDG 5. This vulnerability affects the function actionUpdateEncryptPolicyEdit of the file /com/esafenet/servlet/policy/EncryptPolicyService.java. The manipulation of the argument encryptPolicyId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the

CVE-2024-10072 [HIGH] CWE-89 CVE-2024-10072: A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. This issue affe A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. This issue affects the function actionAddEncryptPolicyGroup of the file /com/esafenet/servlet/policy/EncryptPolicyService.java. The manipulation of the argument checklist leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th

CVE-2024-10597 [CRITICAL] CWE-89 CVE-2024-10597: A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function d A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used

CVE-2024-10279 [CRITICAL] CWE-89 CVE-2024-10279: A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability af A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects unknown code of the file /com/esafenet/servlet/policy/PrintPolicyService.java. The manipulation of the argument policyId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-0792 [CRITICAL] CWE-74 CVE-2025-0792: A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unkn A vulnerability, which was classified as critical, was found in ESAFENET CDG V5. Affected is an unknown function of the file /sdTodoDetail.jsp. The manipulation of the argument flowId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about

CVE-2025-0791 [CRITICAL] CWE-74 CVE-2025-0791: A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue aff A vulnerability, which was classified as critical, has been found in ESAFENET CDG V5. This issue affects some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted ear

CVE-2024-10378 [CRITICAL] CWE-89 CVE-2024-10378: A vulnerability classified as critical has been found in ESAFENET CDG 5. Affected is the function ac A vulnerability classified as critical has been found in ESAFENET CDG 5. Affected is the function actionViewCDGRenewFile of the file /com/esafenet/servlet/client/CDGRenewApplicationService.java. The manipulation of the argument CDGRenewFileId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the

CVE-2024-10611 [HIGH] CWE-89 CVE-2024-10611: A vulnerability was found in ESAFENET CDG 5 and classified as critical. This issue affects the funct A vulnerability was found in ESAFENET CDG 5 and classified as critical. This issue affects the function delProtocol of the file /com/esafenet/servlet/system/PrintScreenListService.java. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vend

CVE-2024-10502 [HIGH] CWE-89 CVE-2024-10502: A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affe A vulnerability has been found in ESAFENET CDG 5 and classified as critical. This vulnerability affects the function getOneFileDirectory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument directoryId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to

CVE-2024-10070 [HIGH] CWE-89 CVE-2024-10070: A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function a A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function actionPolicyPush of the file /com/esafenet/policy/action/PolicyPushControlAction.java. The manipulation of the argument policyId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may b