Approved changes feed: RSS · Atom

cpe:2.3:a:progress:whatsup_gold:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorProgress (f9d80521-f73f-5a85-8df9-9306f2f67809)
ProductWhatsup Gold (48af24f4-f703-51d8-9469-fd9b1454579f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8785 vulnerable 2026-06-08 07:00:25.711356 WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability
CRITICAL (9.8)
In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Ipswitch\.
Published: 2024-12-02T14:49:36.748Z
Updated: 2024-12-02T15:30:19.766Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7763 vulnerable 2026-06-08 06:58:23.388191 WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability
CRITICAL (9.8)
In WhatsUp Gold versions released before 2024.0.0,  an Authentication Bypass issue exists which allows an attacker to obtain encrypted user credentials.
Published: 2024-10-24T20:11:50.614Z
Updated: 2024-10-29T03:55:09.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5018 vulnerable 2026-06-08 06:56:14.612021 WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability
MEDIUM (5.3)
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Path Traversal vulnerability exists Wug.UI.Areas.Wug.Controllers.SessionController.LoadNMScript. This allows allows reading of any file from the applications web-root directory .
Published: 2024-06-25T20:27:11.395Z
Updated: 2024-08-01T20:55:10.444Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5011 vulnerable 2026-06-08 06:56:14.597392 WhatsUp Gold TestController Chart denial of service vulnerability
HIGH (7.5)
In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenticated HTTP request to the TestController Chart functionality can lead to denial of service.
Published: 2024-06-25T20:01:47.996Z
Updated: 2025-02-13T17:53:46.175Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5010 vulnerable 2026-06-08 06:56:14.596703 WhatsUp Gold TestController multiple information disclosure vulnerabilities
HIGH (7.5)
In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality.  A specially crafted unauthenticated HTTP request can lead to a disclosure of sensitive information.
Published: 2024-06-25T20:00:07.728Z
Updated: 2025-02-13T17:53:45.609Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46909 vulnerable 2026-06-08 06:48:10.824395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46908 vulnerable 2026-06-08 06:48:10.823866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46907 vulnerable 2026-06-08 06:48:10.823206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46906 vulnerable 2026-06-08 06:48:10.822768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46905 vulnerable 2026-06-08 06:48:10.819995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.