CVE-2025-13165

HIGH

Digiwin EasyFlow GP 5.7.x-5.7.7.2, 5.8.8.3-5.8.11.1.0810112, 8.1.x-8.1.1.2 - DoS via Specific Requests

Title source: llm
STIX 2.1

Description

EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in denial of web service.

References (2)

Core 2
Core References
Various Sources third-party-advisory
https://www.twcert.org.tw/tw/cp-132-10503-a66fe-1.html
Various Sources third-party-advisory
https://www.twcert.org.tw/en/cp-139-10504-23f4c-2.html

Scores

CVSS v3 7.5
EPSS 0.0036
EPSS Percentile 27.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-770
Status published
Products (3)
Digiwin/EasyFlow GP 5.7.x - 5.7.7.2
Digiwin/EasyFlow GP 5.8.8.3 - 5.8.11.1.0810112
Digiwin/EasyFlow GP 8.1.x - 8.1.1.2
Published Nov 17, 2025
Tracked Since Feb 18, 2026