CVE-2025-13165: Digiwin｜EasyFlow GP - Denial of service

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-17 · updated 2026-10-07
Weakness: CWE-770

Description

EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in denial of web service.

Affected products

Digiwin EasyFlow GP: from 5.8.8.3 through 5.8.11.1.0810112; from 8.1.x through 8.1.1.2; from 5.7.x through 5.7.7.2

References

https://www.twcert.org.tw/en/cp-139-10504-23f4c-2.html
https://www.twcert.org.tw/tw/cp-132-10503-a66fe-1.html

Get alerted when CVE-2025-13165 or the next vulnerability affects your stack