Geomedia Webmap

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-37749 CRITICAL POC Act Now

MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 (aka 16.6.2.66) allows blind SQL Injection via the Id (within sourceItems) parameter to the GetMap method. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Geomedia Webmap

NVD

CVSS 3.1

9.8

EPSS

1.8%

CVE-2021-37749

EPSS 2% CVSS 9.8

CRITICAL POC Act Now

MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 (aka 16.6.2.66) allows blind SQL Injection via the Id (within sourceItems) parameter to the GetMap method. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Geomedia Webmap

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy