Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-6671

WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability

In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

CVSS 3.1 · 9.8 Critical EPSS 19.0% KEV · Not listed
Vendors
Progress
Products
Whatsup Gold Whatsupgold
CVE-2024-6670

WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

CVSS 3.1 · 9.8 Critical EPSS 92.9% KEV · Listed
Vendors
Progress
Products
Whatsup Gold Whatsupgold
CVE-2024-6672

WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an authenticated low-privileged attacker to achieve privilege escalation by modifying a privileged user's password.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Progress
Products
Whatsup Gold Whatsupgold