# cve.now: Esafenet The newest entries naming Esafenet as an affected vendor (up to 200), of 51 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-18859](https://cve.now/CVE-2026-18859.md): ESAFENET CDG usbkey;logindojojs sql injection (CVSS 6.9) - [CVE-2025-3401](https://cve.now/CVE-2025-3401.md): ESAFENET CDG getLimitIPList.jsp sql injection (CVSS 6.9) - [CVE-2025-3400](https://cve.now/CVE-2025-3400.md): ESAFENET CDG UnChkMailApplication.jsp sql injection (CVSS 6.9) - [CVE-2025-3399](https://cve.now/CVE-2025-3399.md): ESAFENET CDG updateNotice.jsp sql injection (CVSS 6.9) - [CVE-2025-3003](https://cve.now/CVE-2025-3003.md): ESAFENET CDG UserAjax sql injection (CVSS 5.3) - [CVE-2025-2927](https://cve.now/CVE-2025-2927.md): ESAFENET CDG getFileTypeList.jsp sql injection (CVSS 6.9) - [CVE-2025-1845](https://cve.now/CVE-2025-1845.md): ESAFENET DSM examExportPDF command injection (CVSS 5.3) - [CVE-2025-1844](https://cve.now/CVE-2025-1844.md): ESAFENET CDG backupLogDetail.jsp sql injection (CVSS 5.3) - [CVE-2025-1841](https://cve.now/CVE-2025-1841.md): ESAFENET CDG ClientSortLog.jsp sql injection (CVSS 6.9) - [CVE-2025-1840](https://cve.now/CVE-2025-1840.md): ESAFENET CDG updateorg.jsp sql injection (CVSS 6.9) - [CVE-2025-1158](https://cve.now/CVE-2025-1158.md): ESAFENET CDG addPolicyToSafetyGroup.jsp sql injection (CVSS 5.3) - [CVE-2025-0795](https://cve.now/CVE-2025-0795.md): ESAFENET CDG todolistjump.jsp cross site scripting (CVSS 5.3) - [CVE-2025-0794](https://cve.now/CVE-2025-0794.md): ESAFENET CDG todoDetail.jsp cross site scripting (CVSS 5.3) - [CVE-2025-0793](https://cve.now/CVE-2025-0793.md): ESAFENET CDG todoDetail.jsp sql injection (CVSS 5.3) - [CVE-2025-0792](https://cve.now/CVE-2025-0792.md): ESAFENET CDG sdTodoDetail.jsp sql injection (CVSS 5.3) - [CVE-2025-0791](https://cve.now/CVE-2025-0791.md): ESAFENET CDG sdDoneDetail.jsp sql injection (CVSS 5.3) - [CVE-2025-0790](https://cve.now/CVE-2025-0790.md): ESAFENET CDG doneDetail.jsp cross site scripting (CVSS 5.3) - [CVE-2025-0789](https://cve.now/CVE-2025-0789.md): ESAFENET CDG doneDetail.jsp sql injection (CVSS 5.3) - [CVE-2025-0788](https://cve.now/CVE-2025-0788.md): ESAFENET CDG content\_top.jsp sql injection (CVSS 5.3) - [CVE-2025-0787](https://cve.now/CVE-2025-0787.md): ESAFENET CDG appDetail.jsp cross site scripting (CVSS 5.3) - [CVE-2025-0786](https://cve.now/CVE-2025-0786.md): ESAFENET CDG appDetail.jsp sql injection (CVSS 5.3) - [CVE-2025-0785](https://cve.now/CVE-2025-0785.md): ESAFENET CDG SysConfig.jsp cross site scripting (CVSS 5.3) - [CVE-2024-10660](https://cve.now/CVE-2024-10660.md): ESAFENET CDG HookService.java deleteHook sql injection (CVSS 5.3) - [CVE-2024-10659](https://cve.now/CVE-2024-10659.md): ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injection (CVSS 5.3) - [CVE-2024-10613](https://cve.now/CVE-2024-10613.md): ESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy sql injection (CVSS 5.3) - [CVE-2024-10612](https://cve.now/CVE-2024-10612.md): ESAFENET CDG HookInvalidCourseService.java removeHookInvalidCourse sql injection (CVSS 5.3) - [CVE-2024-10611](https://cve.now/CVE-2024-10611.md): ESAFENET CDG PrintScreenListService.java delProtocol sql injection (CVSS 5.3) - [CVE-2024-10610](https://cve.now/CVE-2024-10610.md): ESAFENET CDG ProtocolService.java delProtocol sql injection (CVSS 5.3) - [CVE-2024-10597](https://cve.now/CVE-2024-10597.md): ESAFENET CDG PolicyActionService.java delPolicyAction sql injection (CVSS 5.3) - [CVE-2024-10596](https://cve.now/CVE-2024-10596.md): ESAFENET CDG EncryptPolicyTypeService.java delEntryptPolicySort sql injection (CVSS 5.3) - [CVE-2024-10595](https://cve.now/CVE-2024-10595.md): ESAFENET CDG PublicDocInfoAjax.java delDifferCourseList sql injection (CVSS 5.3) - [CVE-2024-10594](https://cve.now/CVE-2024-10594.md): ESAFENET CDG FileDirectoryService.java docHistory sql injection (CVSS 5.3) - [CVE-2024-10502](https://cve.now/CVE-2024-10502.md): ESAFENET CDG FileDirectoryService.java getOneFileDirectory sql injection (CVSS 5.3) - [CVE-2024-10501](https://cve.now/CVE-2024-10501.md): ESAFENET CDG ExamCDGDocService.java findById sql injection (CVSS 5.3) - [CVE-2024-10500](https://cve.now/CVE-2024-10500.md): ESAFENET CDG HookWhiteListService.java sql injection (CVSS 5.3) - [CVE-2024-10379](https://cve.now/CVE-2024-10379.md): ESAFENET CDG DecryptApplicationService.java actionViewDecyptFile path traversal (CVSS 5.3) - [CVE-2024-10378](https://cve.now/CVE-2024-10378.md): ESAFENET CDG CDGRenewApplicationService.java actionViewCDGRenewFile sql injection (CVSS 5.3) - [CVE-2024-10377](https://cve.now/CVE-2024-10377.md): ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injection (CVSS 5.3) - [CVE-2024-10376](https://cve.now/CVE-2024-10376.md): ESAFENET CDG AutoSignService.java actionPassOrNotAutoSign sql injection (CVSS 5.3) - [CVE-2024-10279](https://cve.now/CVE-2024-10279.md): ESAFENET CDG PrintPolicyService.java sql injection (CVSS 5.3) - [CVE-2024-10278](https://cve.now/CVE-2024-10278.md): ESAFENET CDG ReUserOrganiseService.java sql injection (CVSS 5.3) - [CVE-2024-10277](https://cve.now/CVE-2024-10277.md): ESAFENET CDG UsbKeyAjax.java sql injection (CVSS 5.3) - [CVE-2024-10135](https://cve.now/CVE-2024-10135.md): ESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injection (CVSS 5.3) - [CVE-2024-10134](https://cve.now/CVE-2024-10134.md): ESAFENET CDG MultiServerAjax.java connectLogout sql injection (CVSS 5.3) - [CVE-2024-10133](https://cve.now/CVE-2024-10133.md): ESAFENET CDG NetSecPolicyAjax.java updateNetSecPolicyPriority sql injection (CVSS 5.3) - [CVE-2024-10072](https://cve.now/CVE-2024-10072.md): ESAFENET CDG EncryptPolicyService.java actionAddEncryptPolicyGroup sql injection (CVSS 5.3) - [CVE-2024-10071](https://cve.now/CVE-2024-10071.md): ESAFENET CDG EncryptPolicyService.java actionUpdateEncryptPolicyEdit sql injection (CVSS 5.3) - [CVE-2024-10070](https://cve.now/CVE-2024-10070.md): ESAFENET CDG PolicyPushControlAction.java actionPolicyPush sql injection (CVSS 5.3) - [CVE-2024-10069](https://cve.now/CVE-2024-10069.md): ESAFENET CDG MailDecryptApplicationService.java actionPassMainApplication sql injection (CVSS 5.3) - [CVE-2024-9560](https://cve.now/CVE-2024-9560.md): ESAFENET CDG Catelogs;logindojojs delCatelogs sql injection (CVSS 5.3) - [CVE-2024-9536](https://cve.now/CVE-2024-9536.md): ESAFENET CDG MultiServerBackService sql injection (CVSS 5.3) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/esafenet Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.