target entity

WhatsUp Gold

2 source-linked records in the current knowledge graph.

Mar 3, 2025high

CVE-2024-4885: Progress WhatsUp Gold Path Traversal Vulnerability

Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticated attacker to achieve remote code execution. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CVE-2024-4885EPSS 99.3%ProgressWhatsUp Gold

CISA KEV ↗ · unattributed attribution

Sep 16, 2024high

CVE-2024-6670: Progress WhatsUp Gold SQL Injection Vulnerability

Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-6670EPSS 94.7%ProgressWhatsUp Gold

CISA KEV ↗ · unattributed attribution