WG
IT Management
WhatsUp Gold
On CISA KEVExploited in the wildRansomware-linked
62
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 13High 21Medium 23Low 0
Watch
Add WhatsUp Gold to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-65941 | 8.8 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service. Affected: before 26.0.2 |
| CVE-2024-46908 | 8.8 | Dec 2 | In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to… Affected: before 24.0.1 |
| CVE-2024-46907 | 8.8 | Dec 2 | In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to… Affected: before 24.0.1 |
| CVE-2024-46906 | 8.8 | Dec 2 | In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated low-privileged user (at least Report Viewer permissions required) to… Affected: before 24.0.1 |
| CVE-2024-46905 | 8.8 | Dec 2 | In WhatsUp Gold versions released before 2024.0.1, a SQL Injection vulnerability allows an authenticated lower-privileged user (at least Network Manager permissions required) to… Affected: before 24.0.1 |
| CVE-2024-6672 | 8.8 | Aug 29 | In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an authenticated low-privileged attacker to achieve privilege escalation by modifying a… Affected: before 24.0 |
| CVE-2024-5015 | 8.8 | Jun 25 | In WhatsUp Gold versions released before 2023.1.3, an authenticated SSRF vulnerability in Wug.UI.Areas.Wug.Controllers.SessionControler.Update allows a low privileged user to… Affected: before 23.1.3 |
| CVE-2024-5008 | 8.8 | Jun 25 | In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain RCE… Affected: before 23.1.3 |
| CVE-2016-1000000 | 8.8 | Oct 6 | Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection Affected: through 16.4 |
| CVE-2024-5012 | 8.6 | Jun 25 | In WhatsUp Gold versions released before 2023.1.3, there is a missing authentication vulnerability in WUGDataAccess.Credentials Affected: before 23.1.3 |
| CVE-2024-5009 | 8.4 | Jun 25 | In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.InstallController.SetAdminPassword allows local attackers to… Affected: before 23.1.3 |
| CVE-2026-65937 | 8.0 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI Affected: before 26.0.2 |
| CVE-2024-12106 | 7.5 | Dec 31 | WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication Affected: 2023.1.0 before 2024.0.2 |
| CVE-2024-7763 | 7.5 | Oct 24 | In WhatsUp Gold versions released before 2024.0.0, an Authentication Bypass issue exists which allows an attacker to obtain encrypted user credentials Affected: before 24.0 |
| CVE-2024-5019 | 7.5 | Jun 25 | In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Arbitrary File Read issue exists in Wug.UI.Areas.Wug.Controllers.SessionController.CachedCSS Affected: before 23.1.3 |
| CVE-2024-5018 | 7.5 | Jun 25 | In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Path Traversal vulnerability exists Wug.UI.Areas.Wug.Controllers.SessionController.LoadNMScript Affected: before 23.1.3 |
| CVE-2024-5013 | 7.5 | Jun 25 | In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service vulnerability was identified. An unauthenticated attacker can put the application into… Affected: before 23.1.3 |
| CVE-2024-5011 | 7.5 | Jun 25 | In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenticated HTTP request to the… Affected: before 23.1.3 |
| CVE-2024-5010 | 7.5 | Jun 25 | In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality. A specially crafted unauthenticated HTTP request can lead to a… Affected: before 23.1.3 |
| CVE-2022-29847 | 7.5 | May 11 | In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay… Affected: 21.0.0 through 21.1.1; 22.0.0 |
| CVE-2024-5016 | 7.2 | Jun 25 | In WhatsUp Gold versions released before 2023.1.3, Distributed Edition installations can be exploited by using a deserialization tool to achieve a Remote Code Execution as… Affected: before 23.1.0; 23.1.0 |
Showing 21