Skip to content
OpenAdvisories

Product · Progress Software

WhatsUp Gold

42 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2024-5009 Public exploit EPSS 17%

    WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability

    In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.InstallController.SetAdminPassword allows local attackers to modify admin's password.

    Progress Software WhatsUp Gold
  • High 7.5
    CVE-2023-6595 Public exploit

    WhatsUp Gold Unauthenticated Access to an API Endpoint

    In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold.

    Progress Software WhatsUp Gold