Vulnerabilities > Esafenet

DATE CVE VULNERABILITY TITLE RISK
2019-09-30 CVE-2017-18636 Path Traversal vulnerability in Esafenet CDG
CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.
network
low complexity
esafenet CWE-22
5.0
2019-03-08 CVE-2019-9632 Unspecified vulnerability in Esafenet Electronic Document Security Management System V3/V5
ESAFENET CDG V3 and V5 has an arbitrary file download vulnerability via the fileName parameter in download.jsp because the InstallationPack parameter is mishandled in a /CDGServer3/ClientAjax request.
network
low complexity
esafenet
5.0