CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects Java. It may be remotely exploitable.
CVE
CVE-2024-9969
Severity
MEDIUM
CVSS
5.4
EPSS
0.27%
Java
Original NVD Description
NewType WebEIP v3.0 does not properly validate user input, allowing a remote attacker with regular privileges to insert JavaScript into specific parameters, resulting in a Reflected Cross-site Scripting (XSS) attack. The affected product is no longer maintained. It is recommended to upgrade to the new product.
Related CVEs
Other vulnerabilities affecting the same vendor(s)