Approved changes feed: RSS · Atom

cpe:2.3:a:newtype:webeip:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

VendorNewtype (4eb67900-dc38-5322-9183-196ed8601144)
ProductWebeip (67f1d6f6-d82b-5fb2-9ad4-bf42fac1b394)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9969 vulnerable 2026-06-08 07:00:28.982462 NewType WebEIP v3.0 - Reflected XSS
MEDIUM (5.4)
NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack. The affected product is no longer maintained. It is recommended to upgrade to the new product.
Published: 2024-10-15T03:26:33.730Z
Updated: 2024-10-15T15:34:43.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9968 vulnerable 2026-06-08 07:00:28.981996 NewType WebEIP v3.0 - SQL injection
HIGH (8.8)
WebEIP v3.0 from NewType does not properly validate user input, allowing remote attackers with regular privilege to inject SQL commands to read, modify, and delete data stored in database. The affected product is no longer maintained. It is recommended to upgrade to the new product.
Published: 2024-10-15T02:40:44.637Z
Updated: 2024-10-15T13:39:38.622Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.