CVE-2021-22851

HGiga OAKloud Portal - SQL injection -1

State: Published
Severity: 9.8 Critical
Published: Jan 19, 2021
Updated: Sep 16, 2024
Reserved: Jan 6, 2021

Description

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (document management page) to obtain database schema and data.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	twcert

Weaknesses

CWE-89 SQL Injection

Affected Products

Product	Versions
OAKSv20 OAKlouds-document_v3 2.0HGiga	before 2.0-54Affected
OAKSv30 OAKlouds-document_v3 3.0HGiga	before 3.0-54Affected

References

https://www.chtsecurity.com/news/eb024200-7cf9-4c58-a063-c451dbc9daef
https://www.twcert.org.tw/tw/cp-132-4327-50e99-1.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.