Skip to content

Product

newtype webeip vulnerabilities

3 published CVES affecting newtype webeip, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest newtype webeip CVEs

Newest publication first

  1. CVE-2026-18610 NewType WebEIP EIP_Com_FileList.aspx improper authentication

    Published
    MediumCVSS 6.9 EPSS 0.68%

    A vulnerability was detected in NewType WebEIP up to 3.0. This affects an unknown part of the file /EIP_Com_FileList.aspx. The manipulation results in improper authentication. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was...

  2. CVE-2024-9969 NewType WebEIP v3.0 - Reflected XSS

    Published
    MediumCVSS 5.4 EPSS 0.29%

    NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack. The affected product is no longer maintained. It is recommended...

  3. CVE-2024-9968 NewType WebEIP v3.0 - SQL injection

    Published
    HighCVSS 8.8 EPSS 0.65%

    WebEIP v3.0 from NewType does not properly validate user input, allowing remote attackers with regular privilege to inject SQL commands to read, modify, and delete data stored in database. The affected product is no longer maintained. It is recommended to upgrade to the new produ...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.