Every CVESearch/Get API key

CVE-2021-42655

SQL injection in SiteServer CMS

8.8 High

CVE-2021-42655 is a high vulnerability (CVSS 8.8) in Sscms Siteserver Cms, published May 24, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.22%, the 69th percentile. No source names a fixed version.

What does this mean?
Severity
8.8 HighCVSS 3.1, NVD
Exploit chance
1.22%EPSS, 69th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.22%Up 0.3 points since May 25, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
SSCMS
NuGet
through 6.15.51None known
SSCMS
NuGet
through 6.15.51, plus listed versions
1.0.0-preview4
None known

What each source reports

NVD Score used8.8

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

Record
CVE-2021-42655
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-89
Updated
2026-11-02
CVE ListNo score

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

Record
CVE-2021-42655
Updated
2026-11-02
EUVDEUVD-2022-2681No score

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

Record
EUVD-2022-2681
Updated
2026-11-03
GitHub AdvisoriesGHSA-5xr5-v2h7-2w7w8.8

SQL injection in SiteServer CMS

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

Record
GHSA-5xr5-v2h7-2w7w
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-89
Updated
2026-11-02
OSV8.8

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

Record
CVE-2021-42655
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVGHSA-5xr5-v2h7-2w7w8.8

SQL injection in SiteServer CMS

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability.

Record
GHSA-5xr5-v2h7-2w7w
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-89
Updated
2026-11-02

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open