Digital Arts Inc. vulnerabilities

12 vulnerabilities

Known vulnerabilities in Digital Arts Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 15 products.

Products

15
6.1CVE-2018-16181daji-filter+1
EPSS score
0.83%
HTTP header injection vulnerability in i-FILTER Ver.9.50R05 and earlier may allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks that may result in an arbitrary script injection or setting an arbitrary cookie values via unspecified vectors.
6.1CVE-2018-16180daji-filter+1
EPSS score
0.79%
Cross-site scripting vulnerability in i-FILTER Ver.9.50R05 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
6.9CVE-2025-47149digital arts inc.i-filter
EPSS score
0.17%
The optional feature 'Anti-Virus & Sandbox' of i-FILTER contains an issue with improper pattern file validation. If exploited, the product may treat an unauthorized pattern file as an authorized. If the product uses a specially crafted pattern file, information in the server where the product is running may be retrieved, and/or cause a denial of service (DoS) condition.
8.5CVE-2025-57846digital arts inc.i-フィルター 6.0+5
EPSS score
0.15%
Multiple i-フィルター products contain an issue with incorrect default permissions. If this vulnerability is exploited, a local authenticated attacker may replace a service executable on the system where the product is running, potentially allowing arbitrary code execution with SYSTEM privileges.
4.3CVE-2022-21170daji-filter+2
EPSS score
0.98%
Improper check for certificate revocation in i-FILTER Ver.10.45R01 and earlier, i-FILTER Ver.9.50R10 and earlier, i-FILTER Browser & Cloud MultiAgent for Windows Ver.4.93R04 and earlier, and D-SPA (Ver.3 / Ver.4) using i-FILTER allows a remote unauthenticated attacker to conduct a man-in-the-middle attack and eavesdrop on an encrypted communication.
9.3CVE-2017-10860daji-filter_installer+1
EPSS score
1.78%
Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
9.3CVE-2017-10858daji-filter_installer+1
EPSS score
1.06%
Untrusted search path vulnerability in "i-filter 6.0 install program" file version 1.0.8.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
9.3CVE-2017-10859daji-filter_installer+1
EPSS score
1.06%
Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
8.4CVE-2026-25191digital arts inc.finalcode ver.5 series+1
EPSS score
0.14%
The installer of FinalCode Client provided by Digital Arts Inc. contains an issue with the DLL search path. If a user is directed to place a malicious DLL file and the installer to the same directory and execute the installer, arbitrary code may be executed with the installer's execution privilege.
6.8CVE-2026-28267digital arts inc.digitalarts@cloud agent (for windows)+9
EPSS score
0.16%
Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user.
8.5CVE-2026-23703digital arts inc.finalcode ver.5 series+1
EPSS score
0.12%
The installer of FinalCode Client provided by Digital Arts Inc. contains an incorrect default permissions vulnerability. A non-administrative user may execute arbitrary code with SYSTEM privilege.
5.3CVE-2023-22278dajm-filter+1
EPSS score
0.71%
m-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series) allows a remote unauthenticated attacker to bypass authentication and send users' unintended email when email is being sent under the certain conditions. The attacks exploiting this vulnerability have been observed.