CVE-2024-9971

Summary

CVE-2024-9971 is a vulnerability affecting NewType's FlowMaster BPM Plus software. This issue arises from the application's query functionality, which fails to implement adequate input validation. Consequently, an attacker with standard user privileges can inject SQL commands, enabling them to read, modify, or delete database contents remotely. This security flaw poses a significant risk, allowing unauthorized access and manipulation of critical data. Users are urged to apply patches or updates as soon as they become available to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.