CVE-2021-22852: Hgiga Oaklouds Openid

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (online registration) to obtain database schema and data.

Affected products

• Hgiga Oaklouds Openid: from 2.0, before 2.0-54 (fixed in 2.0-54); from 3.0, before 3.0-54 (fixed in 3.0-54)

Published 2021-01-19. Last modified 2026-06-17.