CVE-2024-9969

MEDIUM 5.4CVE-2024-9969 · Published 15/10/2024 · updated 17/06/2026

In short

CVE-2024-9969 is a MEDIUM (CVSS 5.4) vulnerability affecting webeip (newtype).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 21.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webeip newtype	`= 3.0`	No fix yet

Description

NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack. The affected product is no longer maintained. It is recommended to upgrade to the new product.

References

twcert.org.tw/en/cp-139-8135-ce1e6-2.html · Third Party Advisory
twcert.org.tw/tw/cp-132-8134-c476d-1.html · Third Party Advisory

More vulnerabilities in webeip

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free