CVE-2021-41063: Xylem Aanderaa Geoview

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attackers to execute arbitrary commands.

Affected products

• Xylem Aanderaa Geoview: before 2.1.3 (fixed in 2.1.3)

Published 2021-12-08. Last modified 2026-06-17.