Security Advisory

CVE-2024-9971

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-10-15 03:39:56

Last updated 2024-10-15 14:05:33

Assigner twcert

CVSS score 8.8

State PUBLISHED

Description

The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database contents.

← Browse all CVEs View on cve.org ↗