CVE-2021-41063

—

CVSS 3.1

9.8 critical

EPSS

2%p79

Published

Dec 8, 2021 (Dec 8, 2021)

Modified

Jun 17, 2026

Description

SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attackers to execute arbitrary commands.

Vendors: xylem
Products: aanderaa geoview
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.