Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-13163

Digiwin｜EasyFlow GP - Insufficiently Protected Credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Digiwin EasyFlow GP

Default version status: unaffected

  • 5.8.8.3 to ≤ 5.8.11.1.0810112affected
  • 8.1.* to ≤ 8.1.1.2affected

References