Product by Progress

    Progress Software WhatsUp Gold

    62 known vulnerabilities in Progress Software WhatsUp Gold (Progress), 2 of them actively exploited (CISA KEV).

    Key figures

    62

    Vulnerabilities

    2

    Actively exploited (KEV)

    1

    Used by ransomware

    16

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Progress Software WhatsUp Gold (Progress)
    CriticalCVE-2024-6670

    WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability

    In CISA KEVRansomwarealso in 1 other product

    		9.8
    CriticalCVE-2024-4885

    WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2024-46909

    WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2024-4883

    WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2024-4884

    WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2024-6671

    WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2024-8785

    WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability

    also in 1 other product

    		9.8
    HighCVE-2024-46906

    WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability

    also in 1 other product

    		8.8
    CriticalCVE-2024-12106

    Progress Software WhatsUp Gold: Missing Authentication for Critical Function

    also in 1 other product

    		9.4
    CriticalCVE-2024-12108

    WhatsUp Gold - Public API signing key rotation issue

    also in 1 other product

    		9.6
    HighCVE-2024-5008

    WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability

    also in 1 other product

    		8.8
    HighCVE-2024-5009

    WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability

    also in 1 other product

    		8.4
    HighCVE-2024-5010

    WhatsUp Gold TestController multiple information disclosure vulnerabilities

    also in 1 other product

    		7.5
    HighCVE-2024-5011

    WhatsUp Gold TestController Chart denial of service vulnerability

    also in 1 other product

    		7.5
    HighCVE-2024-5016

    WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability

    also in 1 other product

    		7.2
    MediumCVE-2024-12105

    WhatsUp Gold - SnmpExtendedActiveMonitor path traversal

    also in 1 other product

    		6.5
    HighCVE-2022-29847

    Progress Software WhatsUp Gold: security vulnerability

    		7.5
    CriticalCVE-2015-8261

    Progress Software WhatsUp Gold: SQL Injection

    		9.8
    HighCVE-2024-46905

    WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability

    also in 1 other product

    		8.8
    HighCVE-2024-46907

    WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability

    also in 1 other product

    		8.8
    HighCVE-2024-46908

    WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability

    also in 1 other product

    		8.8
    CriticalCVE-2018-8938

    Progress Software WhatsUp Gold: Code Injection

    		9.8
    MediumCVE-2021-41318

    Progress Software WhatsUp Gold: Code Execution

    		6.1
    MediumCVE-2022-29845

    Progress Software WhatsUp Gold: security vulnerability

    		6.5
    MediumCVE-2022-29848

    Progress Software WhatsUp Gold: security vulnerability

    		6.5

    All vulnerabilities in search

    All products by Progress