High severity7.1NVD Advisory· Published Dec 29, 2021· Updated Jun 17, 2026
CVE-2021-36722
CVE-2021-36722
Description
Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole database to full RCE on the affected endpoints. The SQLi caused by CWE-209: Generation of Error Message Containig Sensetive Information, showing parts of the aspx code and the webroot location , information an attacker can leverage to further compromise the host.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)range: Production
Patches
Vulnerability mechanics
References
1- www.gov.il/en/departments/faq/cve_advisoriesnvdThird Party Advisory
News mentions
0No linked articles in our index yet.