Flowmaster Bpm Plus
Approved changes feed: RSS · Atom
cpe:2.3:a:newtype:flowmaster_bpm_plus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Newtype (4eb67900-dc38-5322-9183-196ed8601144) |
|---|---|
| Product | Flowmaster Bpm Plus (641f66dc-9996-53d0-9b12-2299cae93082) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9971 |
vulnerable | 2026-06-08 07:00:28.985281 |
NewType FlowMaster BPM Plus - SQL Injection
HIGH (8.8)
The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database contents.
Published: 2024-10-15T03:39:56.141Z
Updated: 2024-10-15T14:05:33.351Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9970 |
vulnerable | 2026-06-08 07:00:28.984801 |
NewType FlowMaster BPM Plus - Privilege Escalation
HIGH (8.8)
The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie.
Published: 2024-10-15T03:36:15.595Z
Updated: 2024-10-15T15:27:17.681Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.