WG
IT Management
WhatsUp Gold
On CISA KEVExploited in the wildRansomware-linked
62
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 21Medium 23Low 0
Watch
Add WhatsUp Gold to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-2572 | 5.3 | Apr 14 | In WhatsUp Gold versions released before 2024.0.3, a database manipulation vulnerability allows an unauthenticated attacker to modify the contents… Affected: before 24.0.3 |
| CVE-2024-8785 | 5.3 | Dec 2 | In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage NmAPI.exe to create or change an existing registry value in registry path… Affected: before 24.0.1 |
| CVE-2024-4561 | 5.3 | May 14 | In WhatsUp Gold versions released before 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send arbitrary HTTP requests… Affected: before 23.1.2 |
| CVE-2023-6595 | 5.3 | Dec 14 | In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism Affected: before 23.1.0 |
| CVE-2023-6368 | 5.3 | Dec 14 | In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism Affected: before 23.1.0 |
| CVE-2022-29846 | 5.3 | May 11 | In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to obtain the WhatsUp Gold installation serial number Affected: 16.1 through 21.1.1; 22.0.0 |
| CVE-2026-65938 | 4.3 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API. Affected: before 26.0.2 |
| CVE-2012-4344 | – | Aug 15 | Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP… Affected: 15.02 |
| CVE-2012-2601 | – | Aug 15 | SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter Affected: 15.02 |
| CVE-2007-2602 | – | May 11 | Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service (application crash) or execute arbitrary code via a long MIB filename… Affected: 11 |
| CVE-2004-0798 | – | Oct 20 | Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter Affected: 7.0; 7.03; 7.04; 8.0; 8.01; 8.03 |
| CVE-2004-0799 | – | Oct 20 | The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request containing an MS-DOS device… Affected: 7.0; 7.03; 7.04; 8.0; 8.01; 8.03 |