What’s Vulnerable › Products
ESAFENET CDG vulnerabilities
54 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 23 published in the last 12 months.
Check whether your ESAFENET CDG version is affected
Latest ESAFENET CDG vulnerabilities
- CVE-2026-18859 — ESAFENET CDG usbkey;logindojojs sql injection (CVSS 7.3)
- CVE-2025-3401 — ESAFENET CDG getLimitIPList.jsp sql injection (CVSS 9.8)
- CVE-2025-3400 — ESAFENET CDG UnChkMailApplication.jsp sql injection (CVSS 9.8)
- CVE-2025-3399 — ESAFENET CDG updateNotice.jsp sql injection (CVSS 9.8)
- CVE-2025-3003 — ESAFENET CDG UserAjax sql injection (CVSS 6.3)
- CVE-2025-2927 — ESAFENET CDG getFileTypeList.jsp sql injection (CVSS 9.8)
- CVE-2025-1844 — ESAFENET CDG backupLogDetail.jsp sql injection (CVSS 9.8)
- CVE-2025-1841 — ESAFENET CDG ClientSortLog.jsp sql injection (CVSS 9.8)
- CVE-2025-1840 — ESAFENET CDG updateorg.jsp sql injection (CVSS 9.8)
- CVE-2025-1158 — ESAFENET CDG addPolicyToSafetyGroup.jsp sql injection (CVSS 6.3)
- CVE-2025-0795 — ESAFENET CDG todolistjump.jsp cross site scripting (CVSS 6.1)
- CVE-2025-0794 — ESAFENET CDG todoDetail.jsp cross site scripting (CVSS 6.1)
- CVE-2025-0793 — ESAFENET CDG todoDetail.jsp sql injection (CVSS 9.8)
- CVE-2025-0792 — ESAFENET CDG sdTodoDetail.jsp sql injection (CVSS 9.8)
- CVE-2025-0791 — ESAFENET CDG sdDoneDetail.jsp sql injection (CVSS 9.8)
- CVE-2025-0790 — ESAFENET CDG doneDetail.jsp cross site scripting (CVSS 6.1)
- CVE-2025-0789 — ESAFENET CDG doneDetail.jsp sql injection (CVSS 8.8)
- CVE-2025-0788 — ESAFENET CDG content_top.jsp sql injection (CVSS 8.8)
- CVE-2025-0787 — ESAFENET CDG appDetail.jsp cross site scripting (CVSS 5.4)
- CVE-2025-0786 — ESAFENET CDG appDetail.jsp sql injection (CVSS 8.8)
- CVE-2025-0785 — ESAFENET CDG SysConfig.jsp cross site scripting (CVSS 6.1)
- CVE-2024-10660 — ESAFENET CDG HookService.java deleteHook sql injection (CVSS 9.8)
- CVE-2024-10659 — ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection (CVSS 9.8)
- CVE-2024-10613 — ESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy sql injection (CVSS 8.8)
- CVE-2024-10612 — ESAFENET CDG HookInvalidCourseService.java removeHookInvalidCourse sql injection (CVSS 8.8)