{"id":"CVE-2022-42711","aliases":["EUVD-2022-45777","GHSA-2q6q-v4gf-4wh6"],"status":"published","title":"In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to...","description":"In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.","severity":{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01387,"percentile":0.72483,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2022-10-12T00:00:00Z","modified":"2026-06-17T05:05:10Z","products":[{"vendor":"progress","product":"whatsup_gold"}],"references":[{"url":"https://www.progress.com/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://www.progress.com/network-monitoring","tags":["x_transferred","Vendor Advisory"]},{"url":"https://community.progress.com/s/article/Product-Alert-Bulletin-October-2022","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42711"},{"url":"https://www.progress.com"},{"url":"https://github.com/advisories/GHSA-2q6q-v4gf-4wh6"}],"sources":{"cve":[{"id":"CVE-2022-42711","description":"In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.","status":"published","published":"2022-10-12T00:00:00Z","modified":"2025-05-15T18:01:45.53Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:27.640972Z"}],"euvd":[{"id":"EUVD-2022-45777","description":"In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.","status":"published","published":"2022-10-12T00:00:00Z","modified":"2025-05-15T18:01:45Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:46.094311Z"}],"ghsa":[{"id":"GHSA-2q6q-v4gf-4wh6","title":"In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to...","description":"In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.","status":"published","published":"2022-10-12T12:00:18Z","modified":"2025-05-15T18:32:25Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:02:18.914991Z"}],"nvd":[{"id":"CVE-2022-42711","description":"In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.","status":"published","published":"2022-10-12T01:15:11.177Z","modified":"2026-06-17T05:05:10.417Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:07:29.52424Z"}]}}