CVE-2021-37749: Improper Neutralization of Special Elements used in an SQL Command

MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 aka 16.6.2.66 allows blind SQL Injection via the Id within sourceItems parameter to the GetMap method...