TI-2026-15253 CVE-2026-18610 · GHSA-59gp-6cxx-c7v9
NewType WebEIP EIP_Com_FileList.aspx improper authentication
Priority HIGH 70
A vulnerability was detected in NewType WebEIP up to 3.0.
NewType
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
NewType records in CISA KEVNo NewType vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2024-09254 CVE-2024-9971 · GHSA-2g6c-2vm9-2g8p
NewType FlowMaster BPM Plus - SQL Injection
Priority MEDIUM 41
The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database…
TI-2024-09253 CVE-2024-9970 · GHSA-7g9c-pfqm-8rrr
NewType FlowMaster BPM Plus - Privilege Escalation
Priority MEDIUM 41
The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability.
TI-2024-09251 CVE-2024-9968 · GHSA-q47f-prmv-x9hp
NewType WebEIP v3.0 - SQL injection
Priority MEDIUM 41
WebEIP v3.0 from NewType does not properly validate user input, allowing remote attackers with regular privilege to inject SQL commands to read, modify, and delete data stored in database.
TI-2024-09252 CVE-2024-9969 · GHSA-pmw6-mg69-65jh
NewType WebEIP v3.0 - Reflected XSS
Priority LOW 24
NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack.