Read the docs

NewType

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

NewType records in CISA KEV

No NewType vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Flowmaster Bpm Plus 2 records MEDIUM Webeip 2 records MEDIUM

Records

2 records in Webeip · all components

TI-2024-09251 CVE-2024-9968 · GHSA-q47f-prmv-x9hp

NewType WebEIP v3.0 - SQL injection

Priority MEDIUM 41

WebEIP v3.0 from NewType does not properly validate user input, allowing remote attackers with regular privilege to inject SQL commands to read, modify, and delete data stored in database.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00649 Published 2024-10-15 No fix listed CWE-89
TI-2024-09252 CVE-2024-9969 · GHSA-pmw6-mg69-65jh

NewType WebEIP v3.0 - Reflected XSS

Priority LOW 24

NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00286 Published 2024-10-15 No fix listed CWE-79
Open these records in search →