Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-12503

Digiwin｜EasyFlow .NET and EasyFlow AiNet

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

EasyFlow .NET and EasyFlow AiNet developed by Digiwin has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Digiwin EasyFlow .NET

Default version status: unaffected

  • 0 to ≤ 6.6.19affected

Digiwin EasyFlow AiNet

Default version status: unaffected

  • 0 to ≤ 8.1.1affected

References