CVE-2021-22859: Eic E-Document System

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege.

Affected products

• Eic E-Document System: version 3.0.2 only

Published 2021-03-17. Last modified 2026-06-17.