Lucene search
+L

5 matches found

NVD
NVD
•added 2024/06/25 9:16 p.m.•37 views

CVE-2024-5014

In WhatsUp Gold versions released before 2023.1.3, a Server Side Request Forgery vulnerability exists in the GetASPReport feature. This allows any authenticated user to retrieve ASP reports from an HTML form...

7.1CVSS0.00477EPSS
SaveExploits0References2
OSV
OSV
•added 2024/06/25 9:16 p.m.•12 views

CVE-2024-5014

In WhatsUp Gold versions released before 2023.1.3, a Server Side Request Forgery vulnerability exists in the GetASPReport feature. This allows any authenticated user to retrieve ASP reports from an HTML form...

6.5CVSS5.8AI score0.00477EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/06/25 8:13 p.m.•24 views

CVE-2024-5014 WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure

In WhatsUp Gold versions released before 2023.1.3, a Server Side Request Forgery vulnerability exists in the GetASPReport feature. This allows any authenticated user to retrieve ASP reports from an HTML form...

7.1CVSS6.5AI score0.00477EPSS
SaveExploits0References2
CVE
CVE
•added 2024/06/25 8:13 p.m.•79 views

CVE-2024-5014

CVE-2024-5014 affects Progress WhatsUp Gold prior to 2023.1.3, where the GetASPReport feature permits an authenticated user to retrieve ASP reports, revealing sensitive information. The root cause is an information-disclosure vulnerability in GetASPReport, enabling SSRF-style access to reports. T...

7.1CVSS6.7AI score0.00477EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/25 12:00 a.m.•1 views

CVE-2024-5014: Server-Side Request Forgery (SSRF)

In WhatsUp Gold versions released before 2023.1.3, a Server Side Request Forgery vulnerability exists in the GetASPReport feature. This allows any authenticated user to retrieve ASP reports from an HTML form...

7.1CVSS7AI score0.00477EPSS
SaveExploits0References1
Rows per page
Query Builder