Known vulnerabilities in WhatsUp Gold

Vendor: Progress Software Corporation
Software: WhatsUp Gold
Software CPE: cpe:2.3:a:progress_software_corporation:whatsup_gold:*:*:*:*:*:*:*:*
Website: https://www.progress.com/
Total vulnerabilities: 32
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WhatsUp Gold WhatsUp Gold is affected by 32 known vulnerabilities: 1 critical, 7 high, 19 medium, 5 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-65937		 CWE-79 Low
No
No
 2026.0.2 13.08.2026 SB2026081363
#VU142300 - Improper Authorization
CVE-2026-65938		 CWE-285 Low
No
No
 2026.0.2 13.08.2026 SB2026081363
#VU142301 - Improper Access Control
CVE-2026-65939		 CWE-284 Medium
No
No
 2026.0.2 13.08.2026 SB2026081363
#VU142302 - Incorrect Permission Assignment for Critical Resource
CVE-2026-65940		 CWE-732 Low
No
No
 2026.0.2 13.08.2026 SB2026081363
#VU142303 - Improper input validation
CVE-2026-65941		 CWE-20 High
No
No
 2026.0.2 13.08.2026 SB2026081363
#VU102534 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12105		 CWE-22 Medium
No
No
 2024.0.2 10.01.2025 SB2025011036
#VU97855 - Improper input validation
CVE-2024-8785		 CWE-20 High
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU97854 - Improper input validation
CVE-2024-46909		 CWE-20 High
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU97853 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-46905		 CWE-89 Medium
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU97852 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-46906		 CWE-89 Medium
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU97851 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-46907		 CWE-89 Medium
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU97850 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-46908		 CWE-89 Medium
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU96637 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-6672		 CWE-89 Medium
No
No
 2024.0.0 30.08.2024 SB2024083023
#VU96636 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-6671		 CWE-89 High
No
No
 2024.0.0 30.08.2024 SB2024083023
#VU96635 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-6670		 CWE-89 High
Available
Exploited
 2024.0.0 30.08.2024 SB2024083023
#VU95437 - Server-Side Request Forgery (SSRF)
CVE-2024-5015		 CWE-918 Medium
No
No
 2023.1.3 07.08.2024 SB2024080730
#VU95436 - Deserialization of Untrusted Data
CVE-2024-5016		 CWE-502 Low
No
No
 2023.1.3 07.08.2024 SB2024080730
#VU95435 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-4883		 CWE-22 High
Available
No
 2023.1.3 07.08.2024 SB2024080730
#VU95434 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-4885		 CWE-22 Critical
Available
Exploited
 2023.1.3 07.08.2024 SB2024080730
#VU95433 - Unrestricted Upload of File with Dangerous Type
CVE-2024-4884		 CWE-434 High
No
No
 2023.1.3 07.08.2024 SB2024080730


Showing elements 1 - 20 out of 32