Skip to content

Vendor

Sangfor Technologies Co. Ltd. vulnerabilities

2 published CVES affecting Sangfor Technologies Co. Ltd., from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of Sangfor Technologies Co. Ltd. alerts

Products

Latest Sangfor Technologies Co. Ltd. CVEs

Newest publication first

  1. CVE-2023-7307 Sangfor Behavior Management System XML External Entity Injection

    Published
    HighCVSS 8.7 EPSS 0.53%

    Sangfor Behavior Management System (also referred to as DC Management System in Chinese-language documentation) contains an XML external entity (XXE) injection vulnerability in the /src/sangforindex endpoint. A remote unauthenticated attacker can submit crafted XML data containin...

  2. CVE-2025-34041 Sangfor Endpoint Detection and Response OS Command Injection

    Published
    CriticalCVSS 10.0 EPSS 7.5%

    An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19. The vulnerability allows unauthenticated attackers to construct and send malicious HTTP requests to the E...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.