CVE-2021-44874

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via SQL query. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. The bi report module exposes direct SQL commands via POST data in order to select data for report generation. A malicious actor can use the bi report endpoint as a direct SQL prompt under the authenticated user.

• CWE-89

• https://www.systeam.com.br/cve/insecure%20design%20-%20sql%20manipulation-en.txtVendor Advisory
• https://www.systeam.com.br/cve/insecure%20design%20-%20sql%20manipulation-en.txtVendor Advisory

Published

Dec 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44859An out-of-bounds read vulnerability exists when reading a TG…7.8
• CVE-2021-44860An out-of-bounds read vulnerability exists when reading a TI…7.8
• CVE-2021-44862Netskope client is impacted by a vulnerability where an auth…7.8
• CVE-2021-44864TP-Link WR886N 3.0 1.0.1 Build 150127 Rel.34123n is vulnerab…6.5
• CVE-2021-44866An issue was discovered in Online-Movie-Ticket-Booking-Syste…7.5
• CVE-2021-44868A problem was found in ming-soft MCMS v5.1. There is a sql i…9.8
• CVE-2021-44875Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to U…5.3
• CVE-2021-44876Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to U…5.3
• CVE-2021-44877Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to I…7.5
• CVE-2021-44878If an OpenID Connect provider supports the "none" algorithm …7.5
• CVE-2021-44879In gc_data_segment in fs/f2fs/gc.c in the Linux kernel befor…5.5
• CVE-2021-44880D-Link devices DIR_878 DIR_878_FW1.30B08_Hotfix_02 and DIR_8…9.8