Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Progress Software WhatsUp Gold — community.progress.com/s/article/WhatsUp-Gold-Security-Bull… Clear all filters
TI-2024-06184 CVE-2024-6672 · GHSA-jp4g-q362-wf3h

WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability

Priority MEDIUM 41

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an authenticated low-privileged attacker to achieve privilege escalation by modifying a privileged user's password.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00714 Published 2024-08-29 Fixed in 2024.0.0 CWE-89
TI-2024-06182 CVE-2024-6670 · GHSA-x5hw-48mf-cq3m

WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability

Priority CRITICAL 100KEV

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.92907 Published 2024-08-29 Fixed in 2024.0.0 CWE-89