Beveiligingsadvies

CVE-2024-9968

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-10-15 02:40:44
Laatst bijgewerkt 2024-10-15 13:39:38
Toegewezen door twcert
CVSS-score 8.8
Status PUBLISHED

Beschrijving

WebEIP v3.0 from NewType does not properly validate user input, allowing remote attackers with regular privilege to inject SQL commands to read, modify, and delete data stored in database. The affected product is no longer maintained. It is recommended to upgrade to the new product.