CVE-2022-21234: Lansweeper

High severity, CVSS 8.8. EPSS: 72.6% chance of exploitation in the next 30 days.

An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can cause SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability.

Affected products

• Lansweeper Lansweeper: version 9.1.20.2 only

Published 2022-04-14. Last modified 2026-06-17.