CVE-2022-1731: Allgeier Metasonic Doc Webclient

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist.

Affected products

• Allgeier Metasonic Doc Webclient: version 7.0.3.0 only; version 7.0.12.0 only; version 7.0.14.0 only

Published 2022-05-16. Last modified 2026-06-17.