High severity8.8NVD Advisory· Published Oct 15, 2024· Updated Jun 17, 2026
CVE-2024-9971
CVE-2024-9971
Description
The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database contents.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
2- www.twcert.org.tw/en/cp-139-8139-4daab-2.htmlnvdThird Party Advisory
- www.twcert.org.tw/tw/cp-132-8138-d2bb7-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.