Kaspersky LabKLA10227KLA10227 CI vulnerability in WhatsUp Gold
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.5%
An XSS vulnerability was found in WhatsUp Gold. By exploiting this vulnerability malicious users can inject arbitrary web script. This vulnerability can be exploited remotely via unspecified vectors.
Original advisories
Exploitation
Public exploits exist for this vulnerability.
Related products
CVE list
CVE-2012-4344 warning
Solution
Update to latest version
Impacts
- CI
Code injection. Exploitation of vulnerabilities with this impact can lead to changes in target code.
Affected Products
- Ipswitch WhatsUp Gold version 15.02
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.5%