VYPR
Low severity3.5NVD Advisory· Published Jan 29, 2025· Updated Jun 17, 2026

CVE-2025-0795

CVE-2025-0795

Description

A vulnerability was found in ESAFENET CDG V5. It has been classified as problematic. This affects an unknown part of the file /todolistjump.jsp. The manipulation of the argument flowId leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

2
  • Esafenet/CDGllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: V5

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.