NewType vulnerabilities
We track 3 vulnerabilities in NewType products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2024.
Latest NewType vulnerabilities
- 8.8 High severity
FlowMaster BPM Plus: Improper Neutralization of Special Elements used in an SQL Command
The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database contents.
- 8.8 High severity
FlowMaster BPM Plus: Reliance on Cookies without Validation and Integrity Checking
The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie.
- 8.8 High severity
WebEIP: Improper Neutralization of Special Elements used in an SQL Command
WebEIP v3.0 from NewType does not properly validate user input, allowing remote attackers with regular privilege to inject SQL commands to read, modify, and delete data stored in database. The affected product is no longer maintained. It is recommended to upgr