Unknown · Active Intelligent Visualization · CVE-2021-44835
**Name of the Vulnerable Software and Affected Versions**
Active Intelligent Visualization version 5
**Description**
An issue was discovered where the Vdc header is used in a SQL query without being sanitized, causing SQL injection.
**Recommendations**
For Active Intelligent Visualization version 5, consider sanitizing the Vdc header in SQL queries to prevent SQL injection until a patch is available. As a temporary workaround, restrict access to SQL queries using the Vdc header to minimize the risk of exploitation.