CVE-2025-12503: Digiwin Easyflow .net

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

EasyFlow .NET and EasyFlow AiNet developed by Digiwin has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

Affected products

• Digiwin Easyflow .net: up to and including 6.6.19
• Digiwin Easyflow Ainet: up to and including 8.1.1

Published 2025-11-03. Last modified 2026-06-17.