Login Request a demo
WG
IT Management
WhatsUp Gold
by Progress · last CVE Aug 12, 2026
On CISA KEVExploited in the wildRansomware-linked
62
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities62In the news0Timeline
Severity mix
Critical 13High 21Medium 23Low 0
Severity
All severities62Critical13High21Medium23Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add WhatsUp Gold to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6670
RansomwareIn wildKEV
9.8
93%
Aug 29
WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability
Affected: 2023.1.0 before 2024.0.0
CVE-2024-4885
In wildKEV
9.8
99%
Jun 25
WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
Affected: 2023.1.0 before 2023.1.3
CVE-2024-46909
9.8
49%
Dec 2
In WhatsUp Gold versions released before 2024.0.1, a remote unauthenticated attacker could leverage this vulnerability to execute code in the context of the service account
Affected: before 24.0.1
CVE-2024-6671
9.8
19%
Aug 29
In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to…
Affected: 23.1.0 before 24.0
CVE-2024-4884
9.8
24%
Jun 25
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The…
Affected: before 23.1.3
CVE-2024-4883
9.8
65%
Jun 25
In WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in Progress WhatsUp Gold
Affected: before 23.1.3
CVE-2018-8939
9.8
1%
May 1
An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0)
Affected: before 18.0
CVE-2018-8938
9.8
2%
May 1
A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 (18.0)
Affected: before 18.0
CVE-2018-5778
9.8
1%
Jan 24
An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1)
Affected: before 17.1.1
CVE-2018-5777
9.8
2%
Jan 24
An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1)
Affected: before 17.1.1
CVE-2015-8261
9.8
4%
Jan 8
The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL…
Affected: 16.3
CVE-2024-12108
9.6
8%
Dec 31
WhatsUp Gold - Public API signing key rotation issue
Affected: 2023.1.0 before 2024.0.2
CVE-2022-42711
9.6
1%
Oct 12
In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input
Affected: before 22.1.0
Showing 13