Hexagongeospatial: Security Vulnerabilities
MapService.svc in Hexagon GeoMedia WebMap 2020 before Update 2 (aka 16.6.2.66) allows blind SQL Injection via the Id (within sourceItems) parameter to the GetMap method.
CVSS Score
9.8
EPSS Score
0.009
Published
2021-08-30
ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities
CVSS Score
7.8
EPSS Score
0.001
Published
2020-01-30