{"id":"CVE-2024-12105","aliases":["EUVD-2024-50599","GHSA-vf7h-r8hg-75jj"],"status":"published","title":"WhatsUp Gold - SnmpExtendedActiveMonitor path traversal","description":"In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially crafted HTTP request that can lead to information disclosure.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.4168,"percentile":0.98704,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2024-12-31T10:32:08Z","modified":"2026-06-17T06:59:03Z","products":[{"vendor":"progress","product":"whatsup_gold"},{"vendor":"progress software corporation","product":"whatsup gold"}],"references":[{"url":"https://www.progress.com/network-monitoring","tags":["Product"]},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2089"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-12105"},{"url":"https://github.com/advisories/GHSA-vf7h-r8hg-75jj"}],"sources":{"cve":[{"id":"CVE-2024-12105","title":"WhatsUp Gold - SnmpExtendedActiveMonitor path traversal","description":"In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially crafted HTTP request that can lead to information disclosure.","status":"published","published":"2024-12-31T10:32:08.238Z","modified":"2025-01-08T13:07:04.839Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:12.287582Z"}],"euvd":[{"id":"EUVD-2024-50599","description":"In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially crafted HTTP request that can lead to information disclosure.","status":"published","published":"2024-12-31T10:32:08Z","modified":"2025-01-08T13:07:04Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:24.370175Z"}],"ghsa":[{"id":"GHSA-vf7h-r8hg-75jj","title":"In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially...","description":"In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially crafted HTTP request that can lead to information disclosure.","status":"published","published":"2024-12-31T12:30:44Z","modified":"2025-01-08T15:31:09Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:59:25.770221Z"}],"nvd":[{"id":"CVE-2024-12105","description":"In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially crafted HTTP request that can lead to information disclosure.","status":"published","published":"2024-12-31T11:15:06.14Z","modified":"2026-06-17T06:59:03.463Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:10:41.489236Z"}]}}