CVE-2021-41487
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'.
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'.
- Record
CVE-2021-41487- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'.
- Record
CVE-2021-41487- Updated
- 2026-11-02
EUVDEUVD-2021-28513 No score
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'.
- Record
EUVD-2021-28513- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ggwm-xxhm-f9v9
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'.
NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'.
- Record
GHSA-ggwm-xxhm-f9v9- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-41487 is a critical vulnerability (CVSS 9.8) in Nokia Vitalsuite, published June 16, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.79%, the 78th percentile. No source names a fixed version.