CVE-2021-40644: Oasys Project Oasys

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An SQL Injection vulnerability exists in oasys oa_system as of 9/7/2021 in resources/mappers/notice-mapper.xml.

Affected products

• Oasys Project Oasys: version 2021-09-07 only

Published 2022-03-30. Last modified 2026-06-17.