CVE-2025-13163 in EasyFlow GP

요약

\~에 의해 MITRE • 2025. 11. 17.

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 책임이 있는: Twcert
• 예약하다: 2025. 11. 14.
• 공개: 2025. 11. 17.
• 모더레이션: 수락
• 항목: VDB-332622
• CPE: 준비됨
• CWE: CWE-522 (확인됨)
• CVSS: 4.9 (CNA)
• EPSS: 0.00334
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-13163
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-13163
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-13163/