WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability

WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability

WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability

WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability

An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0)

A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 (18.0)

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1)

An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1)

The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL…

WhatsUp Gold - Public API signing key rotation issue

In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input

WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.

WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability

WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability

WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability

WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability

WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability

WhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure Vulnerability

WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability

Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection

WhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerability

WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability

WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI

WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication

WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability

WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability

WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability

WhatsUp Gold InstallController Denial-of-Service Vulnerability

WhatsUp Gold TestController Chart denial of service vulnerability

WhatsUp Gold TestController multiple information disclosure vulnerabilities

In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay…

WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability

Multiple cross-site scripting (XSS) vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via (1) an SNMP OID object,…

WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.

WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.

WhatsUp Gold - SnmpExtendedActiveMonitor path traversal

WhatsUp Gold AppProfileImport path traversal vulnerability

WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure

In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive…

In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read the…

Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via (1) the UniqueID (aka sUniqueID) parameter…

In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious input

In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input

WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettings

WhatsUp Gold Stored Cross-Site Scripting (XSS) via Roles

WhatsUp Gold Stored Cross-Site Scripting (XSS) via Alert Center

WhatsUp Gold Stored Cross-Site Scripting (XSS) via Device Groups

WhatsUp Gold Stored Cross-Site Scripting (XSS) via Dashboard