MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 aka 16.6.2.66 allows blind SQL Injection via the Id within sourceItems parameter to the GetMap method...
10CVSS7.3AI score0.01839EPSS
SaveExploits1References1
attackerkb•added 2021/08/30 4:15 a.m.•8 views
CVE-2021-37749
MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 aka 16.6.2.66 allows blind SQL Injection via the Id within sourceItems parameter to the GetMap method...
