Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-13164

Digiwin|EasyFlow GP - Insufficiently Protected Credentials

Description

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext credentials of AD and system mail from the system frontend.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Digiwin EasyFlow GP

Default version status: unaffected

  • 5.8.8.3 to ≤ 5.8.11.1.0810112affected

References