Volerion logoVolerion
Volerion logoVolerion

Digiwin EasyFlow .NET and EasyFlow AiNet SQL Injection Vulnerability

Vulnerability

A SQL injection vulnerability has been identified in Digiwin's EasyFlow .NET (versions prior to 6.6.19) and EasyFlow AiNet (versions prior to 8.1.1). This vulnerability allows authenticated remote attackers to inject arbitrary SQL commands, potentially leading to unauthorized access to database contents.

Impact

Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries and access or modify database information.

Remediation

Users are advised to update EasyFlow .NET to version 6.6.19 and install patch 20250520. For EasyFlow AiNet, update to version 8.1.1 and also install patch 20250520.

Added: Nov 3, 2025, 7:20 AM
Updated: Nov 3, 2025, 7:20 AM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
2.5
exploitability
4.9
remediation
7.7
relevance
0.8
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.