Known vulnerabilities in WhatsUp Gold

Vendor: Progress Software Corporation
Software: WhatsUp Gold
Software CPE: cpe:2.3:a:progress_software_corporation:whatsup_gold:*:*:*:*:*:*:*:*
Website: https://www.progress.com/
Total vulnerabilities: 27
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WhatsUp Gold WhatsUp Gold is affected by 27 known vulnerabilities: 1 critical, 6 high, 18 medium, 2 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102534 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12105		 CWE-22 Medium
No
No
 2024.0.2 10.01.2025 SB2025011036
#VU97855 - Improper input validation
CVE-2024-8785		 CWE-20 High
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU97854 - Improper input validation
CVE-2024-46909		 CWE-20 High
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU97853 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-46905		 CWE-89 Medium
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU97852 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-46906		 CWE-89 Medium
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU97851 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-46907		 CWE-89 Medium
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU97850 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-46908		 CWE-89 Medium
No
No
 2024.0.1 01.10.2024 SB2024100107
#VU96637 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-6672		 CWE-89 Medium
No
No
 2024.0.0 30.08.2024 SB2024083023
#VU96636 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-6671		 CWE-89 High
No
No
 2024.0.0 30.08.2024 SB2024083023
#VU96635 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-6670		 CWE-89 High
Available
Exploited
 2024.0.0 30.08.2024 SB2024083023
#VU95447 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-5018		 CWE-22 Medium
No
No
 2023.1.3 07.08.2024 SB2024080730
#VU95446 - Improper Access Control
CVE-2024-5009		 CWE-284 Low
Available
No
 2023.1.3 07.08.2024 SB2024080730
#VU95440 - Server-Side Request Forgery (SSRF)
CVE-2024-5014		 CWE-918 Medium
No
No
 2023.1.3 07.08.2024 SB2024080730
#VU95439 - Improper Authentication
CVE-2024-5015		 CWE-287 Medium
No
No
 2023.1.3 07.08.2024 SB2024080730
#VU95438 - Improper input validation
CVE-2024-5013		 CWE-20 Medium
No
No
 2023.1.3 07.08.2024 SB2024080730
#VU95437 - Server-Side Request Forgery (SSRF)
CVE-2024-5015		 CWE-918 Medium
No
No
 2023.1.3 07.08.2024 SB2024080730
#VU95436 - Deserialization of Untrusted Data
CVE-2024-5016		 CWE-502 Low
No
No
 2023.1.3 07.08.2024 SB2024080730
#VU95435 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-4883		 CWE-22 High
Available
No
 2023.1.3 07.08.2024 SB2024080730
#VU95434 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-4885		 CWE-22 Critical
Available
Exploited
 2023.1.3 07.08.2024 SB2024080730
#VU95433 - Unrestricted Upload of File with Dangerous Type
CVE-2024-4884		 CWE-434 High
No
No
 2023.1.3 07.08.2024 SB2024080730


Showing elements 1 - 20 out of 27