← Database

CVE-2021-37749

CRITICAL CVSS: 9.8 Published: 2021-08-30 Modified: 2026-06-17

Description

MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 (aka 16.6.2.66) allows blind SQL Injection via the Id (within sourceItems) parameter to the GetMap method.

Affected Platforms

Hexagongeospatial Geomedia Webmap

Weakness Type

CWE-89

References