CVE-2025-13163: Digiwin｜EasyFlow GP - Insufficiently Protected Credentials
Published Nov 17, 2025
·Updated
EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.
Affected Software
1 affected component
Digiwin EasyFlow GP
Remediation
Information
For version 5.8.x, please update to version 5.8.11.1.081013 or later.
For version 8.1.x, please update to verision 8.1.1.3 or later.
Event History
Nov 17, 2025
CVE Published
via MITRE·06:17 AM
Data Sourced
via MITRE·06:17 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness
Dec 15, 57848
Event
via NVD·07:49 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-13163?
CVE-2025-13163 is categorized as a high severity vulnerability due to its potential for privileged remote access.
2
How do I fix CVE-2025-13163?
To fix CVE-2025-13163, it is recommended to ensure that all database credentials are encrypted and to apply security updates from Digiwin.
3
What type of vulnerability is CVE-2025-13163?
CVE-2025-13163 is classified as an Insufficiently Protected Credentials vulnerability.
4
Who is affected by CVE-2025-13163?
CVE-2025-13163 affects users of Digiwin EasyFlow GP software.
5
What can attackers do with CVE-2025-13163?
Attackers can exploit CVE-2025-13163 to obtain plaintext database account credentials remotely.