CVE-2025-13163: Digiwin｜EasyFlow GP - Insufficiently Protected Credentials

Published Nov 17, 2025

Updated

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.

Affected Software

1 affected component

Digiwin EasyFlow GP

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Digiwin EasyFlow GP to a version that resolves this vulnerability.
Fixed in 5.8.11.1.081013
Upgrade
Upgrade Digiwin EasyFlow GP to a version that resolves this vulnerability.
Fixed in 8.1.1.3

Event History

Nov 17, 2025

CVE Published

via MITRE·06:17 AM

Data Sourced

via MITRE·06:17 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:16 AM

DescriptionSeverityWeakness

Dec 15, 57848

Event

via NVD·07:49 AM

Frequently Asked Questions

What is the severity of CVE-2025-13163?

CVE-2025-13163 is categorized as a high severity vulnerability due to its potential for privileged remote access.

How do I fix CVE-2025-13163?

To fix CVE-2025-13163, it is recommended to ensure that all database credentials are encrypted and to apply security updates from Digiwin.

What type of vulnerability is CVE-2025-13163?

CVE-2025-13163 is classified as an Insufficiently Protected Credentials vulnerability.

Who is affected by CVE-2025-13163?

CVE-2025-13163 affects users of Digiwin EasyFlow GP software.

What can attackers do with CVE-2025-13163?

Attackers can exploit CVE-2025-13163 to obtain plaintext database account credentials remotely.