Security Advisory

CVE-2021-37749

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-30 03:20:17
Last updated 2024-08-04 01:30:07
Assigner mitre
State PUBLISHED

Description

MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 (aka 16.6.2.66) allows blind SQL Injection via the Id (within sourceItems) parameter to the GetMap method.