What’s Vulnerable › Vulnerabilities

CVE-2024-9968: NewType WebEIP v3.0 - SQL injection

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-15 · updated 2026-06-17
• Weakness: CWE-89

Description

WebEIP v3.0 from NewType does not properly validate user input, allowing remote attackers with regular privilege to inject SQL commands to read, modify, and delete data stored in database. The affected product is no longer maintained. It is recommended to upgrade to the new product.

Affected products

• NewType WebEIP: 3.0

References

• https://www.twcert.org.tw/en/cp-139-8133-2cc3a-2.html
• https://www.twcert.org.tw/tw/cp-132-8132-160bb-1.html

Get alerted when CVE-2024-9968 or the next vulnerability affects your stack