CVE-2025-13165: Digiwin｜EasyFlow GP - Denial of service
Published Nov 17, 2025
·Updated
EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in denial of web service.
Affected Software
1 affected component
Digiwin EasyFlow GP
Remediation
Information
Please update version 5.8.x to 5.8.11.1.081013 or later.
Please update version 8.1.x to 8.1.1.3 or later.
Please upgrade version 5.7.x to unaffected version or install the patch.
Event History
Nov 17, 2025
CVE Published
via MITRE·06:46 AM
Data Sourced
via MITRE·06:46 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-13165?
CVE-2025-13165 is classified as a Denial of Service vulnerability.
2
How do I fix CVE-2025-13165?
To mitigate CVE-2025-13165, update Digiwin EasyFlow GP to the latest version that patches this vulnerability.
3
What systems are affected by CVE-2025-13165?
CVE-2025-13165 affects Digiwin EasyFlow GP software.
4
Can CVE-2025-13165 be exploited remotely?
Yes, CVE-2025-13165 allows unauthenticated remote attackers to exploit the vulnerability.
5
What type of attack does CVE-2025-13165 facilitate?
CVE-2025-13165 facilitates a Denial of Service attack, resulting in service interruption.