Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Progress Software WhatsUp Gold 2024.0.2 Clear all filters
TI-2024-11227 CVE-2024-12105 · GHSA-vf7h-r8hg-75jj

WhatsUp Gold - SnmpExtendedActiveMonitor path traversal

Priority MEDIUM 57

In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a specially crafted HTTP request that can lead to information disclosure.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.4168 Published 2024-12-31 Fixed in 2024.0.2 CWE-22
TI-2024-11228 CVE-2024-12106 · GHSA-h99j-qmgw-6ggg

Missing authentication in Progress WhatsUp Gold

Priority MEDIUM 60

In WhatsUp Gold versions released before 2024.0.2, an unauthenticated attacker can configure LDAP settings.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.0948 Published 2024-12-31 Fixed in 2024.0.2 CWE-306
TI-2024-11230 CVE-2024-12108 · GHSA-5c87-492r-w9m4

WhatsUp Gold - Public API signing key rotation issue

Priority MEDIUM 59

In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.07677 Published 2024-12-31 Fixed in 2024.0.2 CWE-290