CVE-2025-13165: Digiwin｜EasyFlow GP - Denial of service

Published Nov 17, 2025

Updated

EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in denial of web service.

Affected Software

1 affected component

Digiwin EasyFlow GP

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Digiwin EasyFlow GP to a version that resolves this vulnerability.
Fixed in 5.8.11.1.081013
Upgrade
Upgrade Digiwin EasyFlow GP to a version that resolves this vulnerability.
Fixed in 8.1.1.3

Event History

Nov 17, 2025

CVE Published

via MITRE·06:46 AM

Data Sourced

via MITRE·06:46 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-13165?

CVE-2025-13165 is classified as a Denial of Service vulnerability.

How do I fix CVE-2025-13165?

To mitigate CVE-2025-13165, update Digiwin EasyFlow GP to the latest version that patches this vulnerability.

What systems are affected by CVE-2025-13165?

CVE-2025-13165 affects Digiwin EasyFlow GP software.

Can CVE-2025-13165 be exploited remotely?

Yes, CVE-2025-13165 allows unauthenticated remote attackers to exploit the vulnerability.

What type of attack does CVE-2025-13165 facilitate?

CVE-2025-13165 facilitates a Denial of Service attack, resulting in service interruption.