CVE-2021-27828

9.1 criticalEPSS 20%

Critical (9.1) in in4velocity in4suite erp. EPSS 20% chance of exploitation in the next 30 days.

SQL injection in In4Suite ERP 3.2.74.1370 allows attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS: 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-06-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

in4velocity:in4suite_erp

References

https://www.exploit-db.com/exploits/49884
https://www.in4velocity.com/in4suite-erp.html
https://www.exploit-db.com/exploits/49884
https://www.in4velocity.com/in4suite-erp.html

Check your stack JSON