Product by Progress Software Corporation
Whatsup Gold
42 known vulnerabilities in Whatsup Gold (Progress Software Corporation), 2 of them actively exploited (CISA KEV).
Key figures
42
Vulnerabilities
2
Actively exploited (KEV)
1
Used by ransomware
10
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-6670 | WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability In CISA KEVRansomwarealso in 1 other product | 9.8 | |
| Critical | CVE-2024-4885 | WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2024-46909 | WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2024-4883 | WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2024-4884 | WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2024-6671 | WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability | 9.8 | |
| Critical | CVE-2024-8785 | WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2024-46906 | WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability | 8.8 | |
| Critical | CVE-2024-12106 | Progress Software WhatsUp Gold: Missing Authentication for Critical Function | 9.4 | |
| Critical | CVE-2024-12108 | WhatsUp Gold - Public API signing key rotation issue | 9.6 | |
| High | CVE-2024-5008 | WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-5009 | WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability | 8.4 | |
| High | CVE-2024-5010 | WhatsUp Gold TestController multiple information disclosure vulnerabilities | 7.5 | |
| High | CVE-2024-5011 | WhatsUp Gold TestController Chart denial of service vulnerability | 7.5 | |
| High | CVE-2024-5016 | WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability | 7.2 | |
| Medium | CVE-2024-12105 | WhatsUp Gold - SnmpExtendedActiveMonitor path traversal | 6.5 | |
| High | CVE-2024-46905 | WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability | 8.8 | |
| High | CVE-2024-46907 | WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability | 8.8 | |
| High | CVE-2024-46908 | WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability | 8.8 | |
| High | CVE-2026-65941 | Progress Software WhatsUp Gold: External Control of File Name or Path | 8.8 | |
| Medium | CVE-2024-5017 | WhatsUp Gold AppProfileImport path traversal vulnerability | 6.5 | |
| Critical | CVE-2024-7763 | WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability | 9.8 | |
| High | CVE-2024-6672 | WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability | 8.8 | |
| High | CVE-2026-65937 | Progress Software WhatsUp Gold: Cross-site Scripting | 8.0 | |
| High | CVE-2024-5013 | WhatsUp Gold InstallController Denial-of-Service Vulnerability | 7.5 |