Progress WhatsUp Gold -
Approved changes feed: RSS · Atom
cpe:2.3:a:progress:whatsup_gold:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Progress (f9d80521-f73f-5a85-8df9-9306f2f67809) |
|---|---|
| Product | Whatsup Gold (48af24f4-f703-51d8-9469-fd9b1454579f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8785 |
vulnerable | 2026-06-03 14:58:19.514712 |
WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability
CRITICAL (9.8)
In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Ipswitch\.
Published: 2024-12-02T14:49:36.748Z
Updated: 2024-12-02T15:30:19.766Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7763 |
vulnerable | 2026-06-03 14:58:07.123737 |
WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability
CRITICAL (9.8)
In WhatsUp Gold versions released before 2024.0.0,
an Authentication Bypass issue exists which allows an attacker to obtain encrypted user credentials.
Published: 2024-10-24T20:11:50.614Z
Updated: 2024-10-29T03:55:09.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5018 |
vulnerable | 2026-06-03 14:57:51.482371 |
WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability
MEDIUM (5.3)
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Path Traversal vulnerability exists Wug.UI.Areas.Wug.Controllers.SessionController.LoadNMScript. This allows allows reading of any file from the applications web-root directory .
Published: 2024-06-25T20:27:11.395Z
Updated: 2024-08-01T20:55:10.444Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5011 |
vulnerable | 2026-06-03 14:57:51.470867 |
WhatsUp Gold TestController Chart denial of service vulnerability
HIGH (7.5)
In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenticated HTTP request to the TestController Chart functionality can lead to denial of service.
Published: 2024-06-25T20:01:47.996Z
Updated: 2025-02-13T17:53:46.175Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5010 |
vulnerable | 2026-06-03 14:57:51.470054 |
WhatsUp Gold TestController multiple information disclosure vulnerabilities
HIGH (7.5)
In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality. A specially crafted
unauthenticated
HTTP request can lead to a disclosure of sensitive information.
Published: 2024-06-25T20:00:07.728Z
Updated: 2025-02-13T17:53:45.609Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46909 |
vulnerable | 2026-06-03 14:57:00.167134 |
WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability
CRITICAL (9.8)
In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage this vulnerability to execute code in the context of the service account.
Published: 2024-12-02T14:46:49.513Z
Updated: 2024-12-02T15:30:19.651Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46908 |
vulnerable | 2026-06-03 14:57:00.166724 |
WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability
HIGH (8.8)
In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required)
to achieve privilege escalation to the admin account.
Published: 2024-12-02T14:40:08.735Z
Updated: 2024-12-02T15:30:19.516Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46907 |
vulnerable | 2026-06-03 14:57:00.166321 |
WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability
HIGH (8.8)
In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to achieve privilege escalation to the admin account.
Published: 2024-12-02T14:42:08.418Z
Updated: 2024-12-02T15:30:19.393Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46906 |
vulnerable | 2026-06-03 14:57:00.165799 |
WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability
HIGH (8.8)
In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to achieve privilege escalation to the admin account.
Published: 2024-12-02T14:44:08.220Z
Updated: 2024-12-02T15:30:19.268Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46905 |
vulnerable | 2026-06-03 14:57:00.163505 |
WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability
HIGH (8.8)
In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated lower-privileged user (at least Network Manager permissions required) to achieve privilege escalation to the admin account.
Published: 2024-12-02T14:45:13.504Z
Updated: 2024-12-02T15:30:19.092Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.