Approved changes feed: RSS · Atom

cpe:2.3:a:progress_software_corporation:whatsup_gold:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProgress Software Corporation (936a4410-8e02-5d5c-938a-4a1509e8d7ef)
ProductWhatsup Gold (bc8f308e-b6d8-55c6-891a-d1212634f6f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-65941 vulnerable 2026-09-16 04:33:07.880690 WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.
HIGH (8.8)
In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account.
Published: 2026-08-12T15:23:54.118Z
Updated: 2026-08-12T16:10:40.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65937 vulnerable 2026-09-16 04:33:07.733623 WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI
HIGH (8)
In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content.
Published: 2026-08-12T15:21:55.475Z
Updated: 2026-08-13T03:55:49.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65940 vulnerable 2026-09-16 04:33:07.639150 WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.
MEDIUM (6.8)
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server.
Published: 2026-08-12T15:23:27.963Z
Updated: 2026-08-12T16:11:10.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65938 vulnerable 2026-09-16 04:33:07.449833 WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.
MEDIUM (4.3)
In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions.
Published: 2026-08-12T15:22:44.387Z
Updated: 2026-08-12T17:06:42.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65939 vulnerable 2026-09-16 04:33:07.265354 WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.
MEDIUM (6.8)
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root.
Published: 2026-08-12T15:23:07.490Z
Updated: 2026-08-13T03:55:48.167Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2572 vulnerable 2026-06-08 07:16:57.574751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8785 vulnerable 2026-06-08 07:00:25.712566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7763 vulnerable 2026-06-08 06:58:23.388252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6672 vulnerable 2026-06-08 06:58:20.154101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6671 vulnerable 2026-06-08 06:58:20.153466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6670 vulnerable 2026-06-08 06:58:20.150874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5019 vulnerable 2026-06-08 06:56:14.612742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5018 vulnerable 2026-06-08 06:56:14.612164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5017 vulnerable 2026-06-08 06:56:14.611555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5016 vulnerable 2026-06-08 06:56:14.609221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5015 vulnerable 2026-06-08 06:56:14.603631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5014 vulnerable 2026-06-08 06:56:14.599480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5013 vulnerable 2026-06-08 06:56:14.598909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5012 vulnerable 2026-06-08 06:56:14.598133 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5011 vulnerable 2026-06-08 06:56:14.597438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5010 vulnerable 2026-06-08 06:56:14.596873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5009 vulnerable 2026-06-08 06:56:14.593798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5008 vulnerable 2026-06-08 06:56:14.588955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4885 vulnerable 2026-06-08 06:50:18.953066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4884 vulnerable 2026-06-08 06:50:18.952432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4883 vulnerable 2026-06-08 06:50:18.951740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4562 vulnerable 2026-06-08 06:50:18.158708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4561 vulnerable 2026-06-08 06:50:18.155739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46909 vulnerable 2026-06-08 06:48:10.824527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46908 vulnerable 2026-06-08 06:48:10.823900 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46907 vulnerable 2026-06-08 06:48:10.823365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46906 vulnerable 2026-06-08 06:48:10.822810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46905 vulnerable 2026-06-08 06:48:10.820903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12108 vulnerable 2026-06-08 06:23:51.277871 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12106 vulnerable 2026-06-08 06:23:51.273390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12105 vulnerable 2026-06-08 06:23:51.271095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6595 vulnerable 2026-06-08 06:21:55.030895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6368 vulnerable 2026-06-08 06:19:47.059593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6367 vulnerable 2026-06-08 06:19:47.059270 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6366 vulnerable 2026-06-08 06:19:47.058792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6365 vulnerable 2026-06-08 06:19:47.058159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6364 vulnerable 2026-06-08 06:19:47.051569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.