CVE-2021-41932

8.8 highEPSS 1.1%

High (8.8) in wolterskluwer teammate\+ audit. EPSS 1.1% chance of exploitation in the next 30 days.

A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQL injections, which can result in complete database compromise, gaining information about other users, unauthorized access to audit data etc.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2022-06-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wolterskluwer:teammate\+_audit

References

https://mjilek.cz/blog/CVE-2021-41932/
https://mjilek.cz/blog/CVE-2021-41932/

Check your stack JSON