CVE-2006-2353

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-15 · updated 2026-06-16
Weakness: CWE-264

Description

NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters.

Affected products

Ipswitch Whatsup Professional: 2006, 2006_premium

References

http://secunia.com/advisories/20075
http://securityreason.com/securityalert/897
http://www.osvdb.org/25473
http://www.securityfocus.com/archive/1/433808
http://www.vupen.com/english/advisories/2006/1787
https://exchange.xforce.ibmcloud.com/vulnerabilities/26502
http://secunia.com/advisories/20075
http://securityreason.com/securityalert/897
http://www.osvdb.org/25473
http://www.securityfocus.com/archive/1/433808
http://www.vupen.com/english/advisories/2006/1787
https://exchange.xforce.ibmcloud.com/vulnerabilities/26502

Get alerted when CVE-2006-2353 or the next vulnerability affects your stack