CVE-2017-17721: Zuuse Beims Contractorweb .net

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter.

Affected products

• Zuuse Beims Contractorweb .net: version 5.18.0.0 only

Published 2017-12-18. Last modified 2026-06-17.