WG
IT Management
WhatsUp Gold
On CISA KEVExploited in the wildRansomware-linked
62
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 21Medium 23Low 0
Watch
Add WhatsUp Gold to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-65941 | 8.8 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service. Affected: before 26.0.2 |
| CVE-2024-46905 | 8.8 | Dec 2 | WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability Affected: 2023.1.0 before 2024.0.1 |
| CVE-2024-46906 | 8.8 | Dec 2 | WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability Affected: 2023.1.0 before 2024.0.1 |
| CVE-2024-46907 | 8.8 | Dec 2 | WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability Affected: 2023.1.0 before 2024.0.1 |
| CVE-2024-46908 | 8.8 | Dec 2 | WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability Affected: 2023.1.0 before 2024.0.1 |
| CVE-2024-6672 | 8.8 | Aug 29 | WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability Affected: 2023.1.0 before 2024.0.0 |
| CVE-2024-5015 | 8.8 | Jun 25 | WhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure Vulnerability Affected: 2023.1.0 before 2023.1.3 |
| CVE-2024-5008 | 8.8 | Jun 25 | WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability Affected: 2023.1.0 before 2023.1.3 |
| CVE-2016-1000000 | 8.8 | Oct 6 | Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection Affected: through 16.4 |
| CVE-2024-5012 | 8.6 | Jun 25 | WhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerability Affected: 2023.1.0 before 2023.1.3 |
| CVE-2024-5009 | 8.4 | Jun 25 | WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability Affected: 2023.1.0 before 2023.1.3 |
| CVE-2026-65937 | 8.0 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI Affected: before 26.0.2 |
| CVE-2024-12106 | 7.5 | Dec 31 | WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication Affected: 2023.1.0 before 2024.0.2 |
| CVE-2024-7763 | 7.5 | Oct 24 | WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability Affected: 2023.1.0 before 2024.0.0 |
| CVE-2024-5019 | 7.5 | Jun 25 | WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability Affected: 2023.1.0 before 2023.1.3 |
| CVE-2024-5018 | 7.5 | Jun 25 | WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability Affected: 2023.1.0 before 2023.1.3 |
| CVE-2024-5013 | 7.5 | Jun 25 | WhatsUp Gold InstallController Denial-of-Service Vulnerability Affected: 2023.1.0 before 2023.1.3 |
| CVE-2024-5011 | 7.5 | Jun 25 | WhatsUp Gold TestController Chart denial of service vulnerability Affected: 2023.1.0 before 2023.1.3 |
| CVE-2024-5010 | 7.5 | Jun 25 | WhatsUp Gold TestController multiple information disclosure vulnerabilities Affected: 2023.1.0 before 2023.1.3 |
| CVE-2022-29847 | 7.5 | May 11 | In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay… Affected: 21.0.0 through 21.1.1; 22.0.0 |
| CVE-2024-5016 | 7.2 | Jun 25 | WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 2023.1.0 before 2023.1.3 |
Showing 21