CVE-2021-22851: Hgiga Oaklouds Openid

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (document management page) to obtain database schema and data.

Affected products

• Hgiga Oaklouds Openid: from 2.0, before 2.0-54 (fixed in 2.0-54); from 3.0, before 3.0-54 (fixed in 3.0-54)

Published 2021-01-19. Last modified 2026-06-17.