CVE-2021-22851

CRITICAL

HGiga oaklouds_openid >=2.0 <2.0-54 - SQL Injection via Document Management Page URL Parameter

Title source: llm
STIX 2.1

Description

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (document management page) to obtain database schema and data.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://www.twcert.org.tw/tw/cp-132-4327-50e99-1.html

Scores

CVSS v3 9.8
EPSS 0.0116
EPSS Percentile 63.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
hgiga/oaklouds_openid 2.0 - 2.0-54
Published Jan 19, 2021
Tracked Since Feb 18, 2026