Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 12:10 a.m.10 views

CVE-2024-4885

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges...

9.8CVSS10AI score0.94274EPSS
Exploits1References1
NVD
NVD
added 2024/06/25 9:16 p.m.23 views

CVE-2024-5019

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Arbitrary File Read issue exists in Wug.UI.Areas.Wug.Controllers.SessionController.CachedCSS. This vulnerability allows reading of any file with iisapppool\NmConsole privileges...

7.5CVSS0.00163EPSS
Exploits0References2
CVE
CVE
added 2024/06/25 8:29 p.m.45 views

CVE-2024-5019

CVE-2024-5019 relates to Progress/WhatsUp Gold prior to version 2023.1.3. The vulnerability is an unauthenticated Arbitrary File Read in the Wug.UI.Areas.Wug.Controllers.SessionController.CachedCSS, allowing reading of files with the iisapppool\NmConsole privileges. The affected software is Whats...

7.5CVSS6.2AI score0.00163EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/06/25 8:29 p.m.27 views

CVE-2024-5019 WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Arbitrary File Read issue exists in Wug.UI.Areas.Wug.Controllers.SessionController.CachedCSS. This vulnerability allows reading of any file with iisapppool\NmConsole privileges...

5.3CVSS0.00163EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/25 8:29 p.m.19 views

CVE-2024-5019 WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Arbitrary File Read issue exists in Wug.UI.Areas.Wug.Controllers.SessionController.CachedCSS. This vulnerability allows reading of any file with iisapppool\NmConsole privileges...

5.3CVSS7.1AI score0.00163EPSS
Exploits0References2
OSV
OSV
added 2024/06/25 8:15 p.m.1 views

CVE-2024-4884

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Apm.UI.Areas.APM.Controllers.CommunityController allows execution of commands with iisapppool\nmconsole privileges...

9.8CVSS6.1AI score
Exploits0References2
OSV
OSV
added 2024/06/25 8:15 p.m.1 views

CVE-2024-4885

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges...

9.8CVSS7.8AI score0.94274EPSS
Exploits1References3
NVD
NVD
added 2024/06/25 8:15 p.m.17 views

CVE-2024-4884

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Apm.UI.Areas.APM.Controllers.CommunityController allows execution of commands with iisapppool\nmconsole privileges...

9.8CVSS0.55487EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/25 7:48 p.m.40 views

CVE-2024-4885 WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges...

9.8CVSS8.3AI score0.94274EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/06/25 7:48 p.m.36 views

CVE-2024-4885 WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges...

9.8CVSS0.94274EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/06/25 7:46 p.m.22 views

CVE-2024-4884 WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Apm.UI.Areas.APM.Controllers.CommunityController allows execution of commands with iisapppool\nmconsole privileges...

9.8CVSS0.55487EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.2 views

Progress Software WhatsUp Gold Security Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold version 2023.1.3 that...

9.8CVSS7.4AI score0.55487EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/25 12:0 a.m.2 views

Progress Software WhatsUp Gold Security Vulnerability

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold version 2023.1.3 that...

9.8CVSS7.4AI score0.94274EPSS
Exploits1References2
Rows per page
Query Builder