No recent security news found for Oneflow.
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2025-71008 | ? N/A | UNKNOWN / UNPATCHED | 0.05% | 2026-01-29 |
| CVE-2025-71011 | ? N/A | UNKNOWN / UNPATCHED | 0.08% | 2026-01-29 |
| CVE-2025-71009 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.08% | 2026-01-29 |
| CVE-2025-65887 | 6.5 MEDIUM | UNKNOWN / UNPATCHED | 0.32% | 2026-01-28 |
| CVE-2025-71000 | 7.5 HIGH | UNKNOWN / UNPATCHED | 0.35% | 2026-01-28 |
| CVE-2025-65891 | 7.5 HIGH | UNKNOWN / UNPATCHED | 0.60% | 2026-01-28 |
| CVE-2025-65890 | 7.5 HIGH | UNKNOWN / UNPATCHED | 0.51% | 2026-01-28 |
| CVE-2025-70999 | 7.5 HIGH | UNKNOWN / UNPATCHED | 0.42% | 2026-01-28 |
| CVE-2025-71003 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.07% | 2026-01-28 |
| CVE-2025-71001 | 6.5 MEDIUM | UNKNOWN / UNPATCHED | 0.32% | 2026-01-28 |
| CVE-2025-65889 | 7.5 HIGH | UNKNOWN / UNPATCHED | 0.42% | 2026-01-28 |
| CVE-2025-71004 | ? N/A | UNKNOWN / UNPATCHED | 0.17% | 2026-01-28 |
| CVE-2025-71007 | ? N/A | UNKNOWN / UNPATCHED | 0.07% | 2026-01-28 |
| CVE-2025-71006 | ? N/A | UNKNOWN / UNPATCHED | 0.04% | 2026-01-28 |
| CVE-2025-71002 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.04% | 2026-01-28 |
| CVE-2025-65886 | 7.5 HIGH | UNKNOWN / UNPATCHED | 0.42% | 2026-01-28 |
| CVE-2025-65888 | 7.5 HIGH | UNKNOWN / UNPATCHED | 0.42% | 2026-01-28 |
| CVE-2025-71005 | ? N/A | UNKNOWN / UNPATCHED | 0.14% | 2026-01-28 |
| CVE-2025-63397 | 6.5 MEDIUM | UNKNOWN / UNPATCHED | 0.33% | 2025-11-10 |
Oneflow is a Swedish software company that provides a cloud-based contract management platform, enabling businesses to create, negotiate, sign, and manage agreements digitally. Its platform is designed to streamline contract workflows and improve compliance, making it relevant in the cybersecurity context for securing sensitive contractual data and reducing risks associated with manual document handling. With 19 tracked CVEs, the vendor's security posture is of interest to organizations relying on its SaaS solutions for critical business processes.
Based on 0 critical CVEs, 0 CISA KEV, 47% unpatched. Model: GDPR Art.83 · not legal advice.