VULNERABILITY INTELLIGENCE

CVE-2021-27828

CVSS score9.1 CRITICAL

EPSS probability20.28%

CISA KEVNot currently listed

Published2021-06-01

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Description

SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.

Weakness classification

nvd@nist.gov: CWE-89

Primary references

cve@mitre.org — Exploit, Third Party Advisory, VDB Entry
cve@mitre.org — Product, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Product, Vendor Advisory