Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority MEDIUM 55

In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Ipswit…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0966 Published 2024-12-02 Fixed in 2024.0.1 CWE-648
Priority MEDIUM 44

In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated lower-privileged user (at least Network Manager permissions required) to achieve privilege escalation to the admin…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02241 Published 2024-12-02 Fixed in 2024.0.1 CWE-89
Priority HIGH 68

In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to achieve privilege escalation to the admin acco…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.40372 Published 2024-12-02 Fixed in 2024.0.1 CWE-89
Priority MEDIUM 44

In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to achieve privilege escalation to the admin acco…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02241 Published 2024-12-02 Fixed in 2024.0.1 CWE-89
Priority MEDIUM 44

In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to achieve privilege escalation to the admin acco…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02241 Published 2024-12-02 Fixed in 2024.0.1 CWE-89