d
digiwin
Security Risk Profile
58
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 26 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 20, 2022 to present
26
Total CVEs
17
Critical+High
1
Exploited
10
Unpatched
Threat Assessment
Avg CVSS
7.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
10
Critical/High
Risk Level
58/100
medium
⚠️ 1 Active Exploits🆕 6Fresh (<7d)📈 6 in Last 30 Days
Severity Distribution
Critical
8High
9Medium
8Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
9Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
8
2
Malicious File Upload
3
3
XSS
2
4
Path Traversal
2
5
XEE
1
Most Affected Products
1. Digiwin EasyFlow .NET25
2. Digiwin EasyFlow GP3
3. Digiwin Business Process Management3
4. Digiwin EasyFlow AiNet2
5. Digiwin ERP2
Recent Vulnerabilities
See more →CVE-2026-102459
CVSS 5.1medium
DigiWin｜EasyFlow .NET - Reflected Cross-site Scripting
Sep 30, 2026🔧 No Patch
CVE-2026-102458
CVSS 9.3critical
DigiWin｜EasyFlow .NET - Missing Authentication
Sep 30, 2026🔧 No Patch
CVE-2026-102457
CVSS 7.1high
DigiWin｜EasyFlow .NET - Arbitrary File Read
Sep 30, 2026🔧 No Patch
CVE-2026-102456
CVSS 7.1high
DigiWin｜EasyFlow .NET - SQL Injection
Sep 30, 2026🔧 No Patch
CVE-2026-102455
CVSS 9.3critical
DigiWin｜EasyFlow .NET - Insecure Deserialization
Sep 30, 2026🔧 No Patch
CVE-2026-102454
CVSS 8.6high
DigiWin｜EasyFlow .NET - Arbitrary File Upload
Sep 30, 2026🔧 No Patch
CVE-2026-12581
CVSS 7.7high
Digiwin｜EasyFlow .NET - Session Fixation
Jun 22, 2026🔧 No Patch
CVE-2026-12580
CVSS 5.1medium
Digiwin｜EasyFlow .NET - Stored Cross-Site Scripting
Jun 22, 2026🔧 No Patch
CVE-2026-5964
CVSS 9.3EPSS 0%critical
Digiwin｜EasyFlow .NET - SQL Injection
Apr 20, 2026
CVE-2026-5963
CVSS 9.3EPSS 0%critical
Digiwin｜EasyFlow .NET - SQL Injection
Apr 20, 2026
Monitor digiwin in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.