← Database

CVE-2025-13164

MEDIUM CVSS: 4.9 Published: 2025-11-17 Modified: 2026-06-17

Description

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext credentials of AD and system mail from the system frontend.

Affected Platforms

Unknown

Weakness Type

CWE-522

References