CVE-2021-22852

HIGH

HGiga oaklouds_openid >=2.0 <2.0-54 - SQL Injection via Online Registration URL Parameter

Title source: llm
STIX 2.1

Description

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (online registration) to obtain database schema and data.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://www.twcert.org.tw/tw/cp-132-4328-97765-1.html

Scores

CVSS v3 8.8
EPSS 0.0103
EPSS Percentile 59.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
hgiga/oaklouds_openid 2.0 - 2.0-54
Published Jan 19, 2021
Tracked Since Feb 18, 2026