AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-13164

MEDIUM · CVSS 4.9 EPSS 0.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-11-17 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.9. It may be remotely exploitable.

CVE
CVE-2025-13164
Severity
MEDIUM
CVSS
4.9
EPSS
0.33%

Original NVD Description

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext credentials of AD and system mail from the system frontend.