CVE-2021-44874 - CVE House
Back to Database
Status published High CVE-2021-44874

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure...

Vulnerability Description

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via SQL query. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. The bi report module exposes direct SQL commands via POST data in order to select data for report generation. A malicious actor can use the bi report endpoint as a direct SQL prompt under the authenticated user.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-44874

Credits & Attribution

No credits recorded in the NVD database.

References

More from dalmark

View All →
CVE-2021-44877
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect...
High 7.5
CVE-2021-44876
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User...
Medium 5.3
CVE-2021-44875
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to User...
Medium 5.3

Affected Vendor

Affected Software

systeam enterprise resource planning
Vulnerable Versions:
2.22.8

Timeline

Official Publish: December 21st, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.