What’s Vulnerable › Products
Progress Software Corporation WhatsUp Gold vulnerabilities
62 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.
Check whether your Progress Software Corporation WhatsUp Gold version is affected
Exploited Progress Software Corporation WhatsUp Gold vulnerabilities
- CVE-2024-4885 — Progress WhatsUp Gold Path Traversal Vulnerability
- CVE-2024-6670 — Progress WhatsUp Gold SQL Injection Vulnerability
Latest Progress Software Corporation WhatsUp Gold vulnerabilities
- CVE-2026-65941 — WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service. (CVSS 8.8)
- CVE-2026-65940 — WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server. (CVSS 6.8)
- CVE-2026-65939 — WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler. (CVSS 6.8)
- CVE-2026-65938 — WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API. (CVSS 4.3)
- CVE-2026-65937 — WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI (CVSS 8.0)
- CVE-2025-2572 — WhatsUp Gold NmConfigurationManager.exe database manipulation vulnerability (CVSS 5.3)
- CVE-2024-12108 — WhatsUp Gold - Public API signing key rotation issue (CVSS 9.6)
- CVE-2024-12106 — WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication (CVSS 7.5)
- CVE-2024-12105 — WhatsUp Gold - SnmpExtendedActiveMonitor path traversal (CVSS 6.5)
- CVE-2024-8785 — WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability (CVSS 5.3)
- CVE-2024-46909 — WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability (CVSS 9.8)
- CVE-2024-46908 — WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability (CVSS 8.8)
- CVE-2024-46907 — WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability (CVSS 8.8)
- CVE-2024-46906 — WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability (CVSS 8.8)
- CVE-2024-46905 — WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability (CVSS 8.8)
- CVE-2024-7763 — WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability (CVSS 7.5)
- CVE-2024-6672 — WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability (CVSS 8.8)
- CVE-2024-6671 — WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability (CVSS 9.8)
- CVE-2024-6670 — Progress WhatsUp Gold SQL Injection Vulnerability (CVSS 9.8) — exploited
- CVE-2024-5019 — WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability (CVSS 7.5)
- CVE-2024-5018 — WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability (CVSS 7.5)
- CVE-2024-5017 — WhatsUp Gold AppProfileImport path traversal vulnerability (CVSS 6.5)
- CVE-2024-5016 — WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.2)
- CVE-2024-5015 — WhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure Vulnerability (CVSS 8.8)
- CVE-2024-5014 — WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure (CVSS 6.5)