CVE-2021-26904

CVE-2021-26904 affects LMA ISIDA Retriever 5.2 and is described as a SQL Injection vulnerability. The connected documents corroborate this vulnerability entry. According to NVD, the CVSS metrics show a high to critical impact: CVSS v3.1 base score 9.8 (CRITICAL) with vector CVSS:3.1/AV:N/AC:L/PR:...

CVE-2021-26903

The CVE-2021-26903 entry concerns LMA ISIDA Retriever 5.2, where a cross-site scripting (XSS) flaw exists in the handling of querytext parameters due to inadequate validation. The CNVD entry explicitly states the vulnerability stems from lack of proper validation of client data for querytext para...