NewType WebEIP v3.0 Vulnerability: Remote Reflected Cross-site Scripting Attack

CVE-2024-9969

5.4MEDIUM

Key Information

Vendor: Newtype
Status: Webeip
Vendor: CVE Published:; 15 October 2024

Summary

NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack. The affected product is no longer maintained. It is recommended to upgrade to the new product.

Affected Version(s)

WebEIP = 3.0

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability Reserved.
Oct 15, 2024
Vulnerability published.
Oct 15, 2024

Collectors

NVD DatabaseMitre Database