ESAFENET CDG
cpe:2.3:a:esafenet:cdg:*:*:*:*:*:*:*
A critical SQL injection vulnerability has been identified in ESAFENET CDG version 5. The issue arises from the handling of the flowId argument in the sdDoneDetail.jsp file, allowing for remote exploitation. This vulnerability has been publicly disclosed.
Exploitation of this vulnerability allows for SQL injection, which could be used to manipulate database queries and potentially access or modify sensitive data.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.