Progress Whatsup Gold vulnerabilities

• progress whatsup gold WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service. CVE-2026-65941 9.8 CriticalAugust 12, 2026
• progress whatsup gold WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server. CVE-2026-65940 6.8 MediumAugust 12, 2026
• progress whatsup gold WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler. CVE-2026-65939 6.8 MediumAugust 12, 2026
• progress whatsup gold WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API. CVE-2026-65938 4.3 MediumAugust 12, 2026
• progress whatsup gold WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI CVE-2026-65937 8.0 HighAugust 12, 2026
• progress whatsup gold WhatsUp Gold NmConfigurationManager.exe database manipulation vulnerability CVE-2025-2572 5.6 MediumApril 14, 2025
• progress whatsup gold WhatsUp Gold - SnmpExtendedActiveMonitor path traversal CVE-2024-12105 EPSS 41.7% 6.5 MediumDecember 31, 2024
• progress whatsup gold WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication CVE-2024-12106 9.4 CriticalDecember 31, 2024
• progress whatsup gold WhatsUp Gold - Public API signing key rotation issue CVE-2024-12108 9.6 CriticalDecember 31, 2024
• progress whatsup gold WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability CVE-2024-8785 9.8 CriticalDecember 2, 2024
• progress whatsup gold WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability CVE-2024-46909 EPSS 48.9% 9.8 CriticalDecember 2, 2024
• progress whatsup gold WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability CVE-2024-46905 8.8 HighDecember 2, 2024
• progress whatsup gold WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability CVE-2024-46906 EPSS 40.4% 8.8 HighDecember 2, 2024
• progress whatsup gold WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability CVE-2024-46907 8.8 HighDecember 2, 2024
• progress whatsup gold WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability CVE-2024-46908 8.8 HighDecember 2, 2024
• progress whatsup gold WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability CVE-2024-7763 9.8 CriticalOctober 24, 2024
• progress whatsup gold, whatsupgold +1 more WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability CVE-2024-6672 8.8 HighAugust 29, 2024
• progress whatsup gold, whatsupgold +1 more WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability CVE-2024-6671 EPSS 19.0% 9.8 CriticalAugust 29, 2024
• progress whatsup gold, whatsupgold +1 more WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability CVE-2024-6670 In KEVPublic exploit EPSS 92.9% 9.8 CriticalAugust 29, 2024
• progress whatsup gold WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability CVE-2024-5019 5.3 MediumJune 25, 2024
• progress whatsup gold WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability CVE-2024-5018 5.3 MediumJune 25, 2024
• progress whatsup gold WhatsUp Gold AppProfileImport path traversal vulnerability CVE-2024-5017 6.5 MediumJune 25, 2024
• progress whatsup gold WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2024-5016 EPSS 22.4% 7.2 HighJune 25, 2024
• progress whatsup gold, whatsupgold +1 more WhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure Vulnerability CVE-2024-5015 7.1 HighJune 25, 2024
• progress whatsup gold WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure CVE-2024-5014 7.1 HighJune 25, 2024
• progress whatsup gold WhatsUp Gold InstallController Denial-of-Service Vulnerability CVE-2024-5013 7.5 HighJune 25, 2024
• progress whatsup gold WhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerability CVE-2024-5012 8.6 HighJune 25, 2024
• progress whatsup gold WhatsUp Gold TestController Chart denial of service vulnerability CVE-2024-5011 EPSS 47.1% 7.5 HighJune 25, 2024
• progress whatsup gold WhatsUp Gold TestController multiple information disclosure vulnerabilities CVE-2024-5010 EPSS 70.0% 7.5 HighJune 25, 2024
• progress whatsup gold WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability CVE-2024-5009 Public exploit EPSS 17.4% 8.4 HighJune 25, 2024
• progress whatsup gold WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability CVE-2024-5008 EPSS 17.3% 8.8 HighJune 25, 2024
• progress whatsup gold WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability CVE-2024-4885 In KEVPublic exploit EPSS 99.3% 9.8 CriticalJune 25, 2024
• progress whatsup gold WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability CVE-2024-4884 EPSS 24.3% 9.8 CriticalJune 25, 2024
• progress whatsup gold WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability CVE-2024-4883 Public exploit EPSS 64.5% 9.8 CriticalJune 25, 2024
• progress whatsup gold, whatsupgold +1 more WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettings CVE-2024-4562 5.4 MediumMay 14, 2024
• progress whatsup gold WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconController CVE-2024-4561 4.2 MediumMay 14, 2024
• progress whatsup gold WhatsUp Gold Unauthenticated Access to an API Endpoint CVE-2023-6368 5.9 MediumDecember 14, 2023
• progress whatsup gold WhatsUp Gold Unauthenticated Access to an API Endpoint CVE-2023-6595 Public exploit 7.5 HighDecember 14, 2023
• progress whatsup gold WhatsUp Gold Stored Cross-Site Scripting (XSS) via Roles CVE-2023-6367 7.6 HighDecember 14, 2023
• progress whatsup gold WhatsUp Gold Stored Cross-Site Scripting (XSS) via Alert Center CVE-2023-6366 7.6 HighDecember 14, 2023
• progress whatsup gold WhatsUp Gold Stored Cross-Site Scripting (XSS) via Device Groups CVE-2023-6365 7.6 HighDecember 14, 2023
• progress whatsup gold WhatsUp Gold Stored Cross-Site Scripting (XSS) via Dashboard CVE-2023-6364 7.6 HighDecember 14, 2023
• progress whatsup gold In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately... CVE-2023-35759 6.1 MediumJune 23, 2023
• progress whatsup gold In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to... CVE-2022-42711 9.6 CriticalOctober 12, 2022
• progress whatsup gold In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an... CVE-2022-29848 6.5 MediumMay 11, 2022
• progress whatsup gold In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an... CVE-2022-29847 EPSS 57.6% 7.5 HighMay 11, 2022
• progress whatsup gold In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an... CVE-2022-29846 5.3 MediumMay 11, 2022
• progress whatsup gold In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an... CVE-2022-29845 6.5 MediumMay 11, 2022
• progress whatsup gold In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately... CVE-2021-41318 Public exploit 6.1 MediumSeptember 28, 2021
• progress whatsup gold An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious... CVE-2018-8939 9.8 CriticalMay 1, 2018
• Show olderLoading…