Read the docs

NewType

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

NewType records in CISA KEV

No NewType vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Flowmaster Bpm Plus 2 records MEDIUM Webeip 2 records MEDIUM

Records

2 records in Flowmaster Bpm Plus · all components

TI-2024-09254 CVE-2024-9971 · GHSA-2g6c-2vm9-2g8p

NewType FlowMaster BPM Plus - SQL Injection

Priority MEDIUM 41

The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00649 Published 2024-10-15 Fixed in 5.3.1 CWE-89
TI-2024-09253 CVE-2024-9970 · GHSA-7g9c-pfqm-8rrr

NewType FlowMaster BPM Plus - Privilege Escalation

Priority MEDIUM 41

The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00613 Published 2024-10-15 Fixed in 5.3.1 CWE-565
Open these records in search →