SQL Injection

Every one of the 47 is a mark on the map. Named now: 1 to 26, most at risk first.

1. ESAFENET CDG HookService.java deleteHook sql injectionCVE-2024-10660ESAFENET · CVSS 6.3 · 5.3% likely

   CWE-89

2. ESAFENET CDG AutoSignService.java actionPassOrNotAutoSign sql injectionCVE-2024-10376ESAFENET · CVSS 6.3 · 0.8% likely

   CWE-89

3. ESAFENET CDG DecryptApplicationService.java actionPassDecryptApplication1 sql injectionCVE-2024-10377ESAFENET · CVSS 6.3 · 0.7% likely

   CWE-89

4. ESAFENET CDG getLimitIPList.jsp sql injectionCVE-2025-3401ESAFENET · CVSS 7.3 · 0.7% likely

   CWE-89

5. ESAFENET CDG UnChkMailApplication.jsp sql injectionCVE-2025-3400ESAFENET · CVSS 7.3 · 0.7% likely

   CWE-89

6. ESAFENET CDG updateNotice.jsp sql injectionCVE-2025-3399ESAFENET · CVSS 7.3 · 0.7% likely

   CWE-89

7. ESAFENET CDG Catelogs;logindojojs delCatelogs sql injectionCVE-2024-9560ESAFENET · CVSS 6.3 · 0.7% likely

   CWE-89

8. ESAFENET CDG getFileTypeList.jsp sql injectionCVE-2025-2927ESAFENET · CVSS 7.3 · 0.6% likely

   CWE-89

9. ESAFENET CDG todoDetail.jsp sql injectionCVE-2025-0793ESAFENET · CVSS 6.3 · 0.6% likely

   CWE-89

10. ESAFENET CDG MultiServerBackService sql injectionCVE-2024-9536ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

11. SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page.CVE-2024-42885Esafenet · CVSS 9.1 · 0.6% likely

    CWE-89

12. ESAFENET CDG PolicyActionService.java delPolicyAction sql injectionCVE-2024-10597ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

13. ESAFENET CDG PrintPolicyService.java sql injectionCVE-2024-10279ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

14. ESAFENET CDG ReUserOrganiseService.java sql injectionCVE-2024-10278ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

15. ESAFENET CDG UsbKeyAjax.java sql injectionCVE-2024-10277ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

16. ESAFENET CDG CDGAuthoriseTempletService.java delSystemEncryptPolicy sql injectionCVE-2024-10659ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

17. ESAFENET CDG SystemEncryptPolicyService.java delSystemEncryptPolicy sql injectionCVE-2024-10613ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

18. ESAFENET CDG HookInvalidCourseService.java removeHookInvalidCourse sql injectionCVE-2024-10612ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

19. ESAFENET CDG PrintScreenListService.java delProtocol sql injectionCVE-2024-10611ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

20. ESAFENET CDG EncryptPolicyTypeService.java delEntryptPolicySort sql injectionCVE-2024-10596ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

21. ESAFENET CDG FileDirectoryService.java docHistory sql injectionCVE-2024-10594ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

22. ESAFENET CDG NetSecConfigService.java actionDelNetSecConfig sql injectionCVE-2024-10135ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

23. ESAFENET CDG MultiServerAjax.java connectLogout sql injectionCVE-2024-10134ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

24. ESAFENET CDG FileDirectoryService.java getOneFileDirectory sql injectionCVE-2024-10502ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

25. ESAFENET CDG ExamCDGDocService.java findById sql injectionCVE-2024-10501ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

26. ESAFENET CDG HookWhiteListService.java sql injectionCVE-2024-10500ESAFENET · CVSS 6.3 · 0.6% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.