What is CVE-2021-41932?

CVE-2021-41932 is a high-severity vulnerability in Wolterskluwer Teammate\+ Audit, classified under SQL Injection. CVSS score: 8.8/10. Published 2022-06-06.

How severe is CVE-2021-41932?

High severity. CVSS v3 base score is 8.8 out of 10.

SQL Injection in Wolterskluwer Teammate\+ Audit

CVE-2021-41932

A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQL injections, which can result in complete database compromise, gaining information about other users, unauthorized access to audit data etc.

Vulnerability class: SQL Injection

EPSS: 0.010 (59.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Wolterskluwer Teammate\+_audit — versions 28.0.19.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-41932?: CVE-2021-41932 is a high-severity vulnerability in Wolterskluwer Teammate\+ Audit, classified under SQL Injection. CVSS score: 8.8/10. Published 2022-06-06.
How severe is CVE-2021-41932?: High severity. CVSS v3 base score is 8.8 out of 10.