Progress Software Corporation WhatsUp Gold

• CVE-2024-6670 Critical 9.8 Exploited WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability 92.9%
• CVE-2024-4885 Critical 9.8 Exploited WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability 99.3%
• CVE-2026-65941 High 8.8 WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service. 0.7%
• CVE-2026-65940 Medium 6.8 WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server. 0.4%
• CVE-2026-65939 Medium 6.8 WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler. 0.4%
• CVE-2026-65938 Medium 4.3 WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API. 0.3%
• CVE-2026-65937 High 8.0 WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI 0.4%
• CVE-2025-2572 Medium 5.6 WhatsUp Gold NmConfigurationManager.exe database manipulation vulnerability 0.3%
• CVE-2024-12105 Medium 6.5 WhatsUp Gold - SnmpExtendedActiveMonitor path traversal 41.7%
• CVE-2024-12106 Critical 9.4 WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication 9.5%
• CVE-2024-12108 Critical 9.6 WhatsUp Gold - Public API signing key rotation issue 7.7%
• CVE-2024-8785 Critical 9.8 WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability 9.7%
• CVE-2024-46909 Critical 9.8 WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability 48.9%
• CVE-2024-46905 High 8.8 WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability 2.2%
• CVE-2024-46906 High 8.8 WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability 40.4%
• CVE-2024-46907 High 8.8 WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability 2.2%
• CVE-2024-46908 High 8.8 WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability 2.2%
• CVE-2024-7763 Critical 9.8 WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability 0.6%
• CVE-2024-6672 High 8.8 WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability 0.7%
• CVE-2024-6671 Critical 9.8 WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability 19.0%
• CVE-2024-5019 Medium 5.3 WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability 0.8%
• CVE-2024-5018 Medium 5.3 WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability 0.8%
• CVE-2024-5017 Medium 6.5 WhatsUp Gold AppProfileImport path traversal vulnerability 1.6%
• CVE-2024-5016 High 7.2 WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability 22.4%
• CVE-2024-5015 High 7.1 WhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure Vulnerability 0.5%
• CVE-2024-5014 High 7.1 WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure 0.5%
• CVE-2024-5013 High 7.5 WhatsUp Gold InstallController Denial-of-Service Vulnerability 0.8%
• CVE-2024-5012 High 8.6 WhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerability 0.4%
• CVE-2024-5011 High 7.5 WhatsUp Gold TestController Chart denial of service vulnerability 47.1%
• CVE-2024-5010 High 7.5 WhatsUp Gold TestController multiple information disclosure vulnerabilities 70.0%
• CVE-2024-5009 High 8.4 WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability 17.4%
• CVE-2024-5008 High 8.8 WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability 17.3%
• CVE-2024-4884 Critical 9.8 WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability 24.3%
• CVE-2024-4883 Critical 9.8 WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability 64.5%
• CVE-2024-4562 Medium 5.4 WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettings 0.4%
• CVE-2024-4561 Medium 4.2 WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconController 0.4%
• CVE-2023-6368 Medium 5.9 WhatsUp Gold Unauthenticated Access to an API Endpoint 0.6%
• CVE-2023-6595 High 7.5 WhatsUp Gold Unauthenticated Access to an API Endpoint 0.8%
• CVE-2023-6367 High 7.6 WhatsUp Gold Stored Cross-Site Scripting (XSS) via Roles 0.5%
• CVE-2023-6366 High 7.6 WhatsUp Gold Stored Cross-Site Scripting (XSS) via Alert Center 0.5%
• CVE-2023-6365 High 7.6 WhatsUp Gold Stored Cross-Site Scripting (XSS) via Device Groups 0.5%
• CVE-2023-6364 High 7.6 WhatsUp Gold Stored Cross-Site Scripting (XSS) via Dashboard 0.5%