Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Advisory: Progress Software WhatsUp Gold — community.progress.com/s/article/WhatsUp-Gold-Security-Bull… Clear all filters
TI-2023-05846 CVE-2023-6368 · GHSA-cf4w-jr22-49m6

WhatsUp Gold Unauthenticated Access to an API Endpoint

Priority LOW 27

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00554 Published 2023-12-14 Fixed in 2023.1 CWE-306
TI-2023-06042 CVE-2023-6595 · GHSA-2jqj-w7h9-j4g2

WhatsUp Gold Unauthenticated Access to an API Endpoint

Priority LOW 34

In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.008 Published 2023-12-14 Fixed in 2023.1 CWE-306
TI-2023-05845 CVE-2023-6367 · GHSA-rfhr-9grr-mhwq

WhatsUp Gold Stored Cross-Site Scripting (XSS) via Roles

Priority LOW 34

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified.

CVSS 3.1HIGH 7.6 Network High privileges User interaction EPSS 0.00513 Published 2023-12-14 Fixed in 2023.1 CWE-79
TI-2023-05842 CVE-2023-6364 · GHSA-qrq8-p6j7-hh57

WhatsUp Gold Stored Cross-Site Scripting (XSS) via Dashboard

Priority LOW 34

In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified.

CVSS 3.1HIGH 7.6 Network High privileges User interaction EPSS 0.00513 Published 2023-12-14 Fixed in 2023.1 CWE-79