Skip to contentProgress Software Corporation Whatsup Gold vulnerabilities
- progress whatsup goldWhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.CVE-2026-659419.8 Critical
- progress whatsup goldWhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.CVE-2026-659406.8 Medium
- progress whatsup goldWhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.CVE-2026-659396.8 Medium
- progress whatsup goldWhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.CVE-2026-659384.3 Medium
- progress whatsup goldWhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UICVE-2026-659378.0 High
- progress whatsup goldWhatsUp Gold NmConfigurationManager.exe database manipulation vulnerabilityCVE-2025-25725.6 Medium
- progress whatsup goldWhatsUp Gold - SnmpExtendedActiveMonitor path traversalCVE-2024-12105EPSS 43.1%6.5 Medium
- progress whatsup goldWhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authenticationCVE-2024-121069.4 Critical
- progress whatsup goldWhatsUp Gold - Public API signing key rotation issueCVE-2024-121089.6 Critical
- progress whatsup goldWhatsUp Gold Registry Overwrite Remote Code Execution VulnerabilityCVE-2024-87859.8 Critical
- progress whatsup goldWhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution VulnerabilityCVE-2024-46909EPSS 48.9%9.8 Critical
- progress whatsup goldWhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation VulnerabilityCVE-2024-469058.8 High
- progress whatsup goldWhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation VulnerabilityCVE-2024-46906EPSS 40.4%8.8 High
- progress whatsup goldWhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation VulnerabilityCVE-2024-469078.8 High
- progress whatsup goldWhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation VulnerabilityCVE-2024-469088.8 High
- progress whatsup goldWhatsUp Gold getReport Missing Authentication Authentication Bypass VulnerabilityCVE-2024-77639.8 Critical
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation VulnerabilityCVE-2024-66728.8 High
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass VulnerabilityCVE-2024-6671EPSS 19.0%9.8 Critical
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold HasErrors SQL Injection Authentication Bypass VulnerabilityCVE-2024-6670In KEVPublic exploitEPSS 92.9%9.8 Critical
- progress whatsup goldWhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure VulnerabilityCVE-2024-50195.3 Medium
- progress whatsup goldWhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure VulnerabilityCVE-2024-50185.3 Medium
- progress whatsup goldWhatsUp Gold AppProfileImport path traversal vulnerabilityCVE-2024-50176.5 Medium
- progress whatsup goldWhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution VulnerabilityCVE-2024-5016EPSS 22.4%7.2 High
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure VulnerabilityCVE-2024-50157.1 High
- progress whatsup goldWhatsUp Gold GetASPReport Server-Side Request Forgery Information DisclosureCVE-2024-50147.1 High
- progress whatsup goldWhatsUp Gold InstallController Denial-of-Service VulnerabilityCVE-2024-50137.5 High
- progress whatsup goldWhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure VulnerabilityCVE-2024-50128.6 High
- progress whatsup goldWhatsUp Gold TestController Chart denial of service vulnerabilityCVE-2024-5011EPSS 47.1%7.5 High
- progress whatsup goldWhatsUp Gold TestController multiple information disclosure vulnerabilitiesCVE-2024-5010EPSS 70.0%7.5 High
- progress whatsup goldWhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation VulnerabilityCVE-2024-5009Public exploitEPSS 17.4%8.4 High
- progress whatsup goldWhatsUp Gold APM Unrestricted File Upload Remote Code Execution VulnerabilityCVE-2024-5008EPSS 17.3%8.8 High
- progress whatsup goldWhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution VulnerabilityCVE-2024-4885In KEVPublic exploitEPSS 99.3%9.8 Critical
- progress whatsup goldWhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution VulnerabilityCVE-2024-4884EPSS 24.3%9.8 Critical
- progress whatsup goldWhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution VulnerabilityCVE-2024-4883Public exploitEPSS 64.5%9.8 Critical
- progress whatsup gold, whatsupgold +1 moreWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettingsCVE-2024-45625.4 Medium
- progress whatsup goldWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconControllerCVE-2024-45614.2 Medium
- progress whatsup goldWhatsUp Gold Unauthenticated Access to an API EndpointCVE-2023-63685.9 Medium
- progress whatsup goldWhatsUp Gold Unauthenticated Access to an API EndpointCVE-2023-6595Public exploit7.5 High
- progress whatsup goldWhatsUp Gold Stored Cross-Site Scripting (XSS) via RolesCVE-2023-63677.6 High
- progress whatsup goldWhatsUp Gold Stored Cross-Site Scripting (XSS) via Alert CenterCVE-2023-63667.6 High
- progress whatsup goldWhatsUp Gold Stored Cross-Site Scripting (XSS) via Device GroupsCVE-2023-63657.6 High
- progress whatsup goldWhatsUp Gold Stored Cross-Site Scripting (XSS) via DashboardCVE-2023-63647.6 High