CVE-2024-9969 in WebEIP

Résumé

par MITRE • 15/10/2024

NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack. The affected product is no longer maintained. It is recommended to upgrade to the new product.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: Twcert
• Réserver: 15/10/2024
• Divulgation: 15/10/2024
• Modérer: accepté
• Entrée: VDB-280332
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 5.4 (CNA)
• EPSS: 0.00269
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-9969
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-9969
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-9969/