CVE-2012-4344

CVE-2012-4344 affects Ipswitch WhatsUp Gold 15.02, with a cross-site scripting (XSS) vulnerability in the web interface that allows remote attackers to inject arbitrary script via unspecified vectors involving the SNMP system name. The available documents identify the affected product/version and...

CVE-2007-2602

CVE-2007-2602 describes a buffer overflow in Ipswitch WhatsUp Gold 11, specifically in the MIBEXTRA.EXE component, triggered by a long MIB filename argument. The underlying issue may allow a denial of service (application crash) and can potentially enable arbitrary code execution. Affected softwa...

CVE-2018-8938

Ipswitch WhatsUp Gold before 18.0 is affected by a Code Injection vulnerability in DlgSelectMibFile.asp. A specially crafted SNMP MIB file can cause arbitrary command/code execution on the WhatsUp Gold server. Affected: WhatsUp Gold versions prior to 18.0. Root cause: errors in code generation/ha...

CVE-2023-6595

CVE-2023-6595 affects Progress WhatsUp Gold versions released before 2023.1. The issue is an API endpoint that lacks authentication, allowing an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold. Red Hat and Nessus/NASL reports corroborate the core ...

CVE-2024-4561

Progress WhatsUp Gold before version 23.1.2 contains a blind SSRF in the FaviconController that lets an attacker issue arbitrary HTTP requests from the affected server (CVE-2024-4561). Affected product is Progress WhatsUp Gold; root cause is SSRF handling in FaviconController. Impact is informati...

CVE-2024-4562

CVE-2024-4562 affects Progress WhatsUp Gold versions prior to 2023.1.2. A Server-Side Request Forgery exists in the HTTP Monitoring functionality due to insufficient authorization, allowing an authenticated user to trigger SSRF. Related advisories/XDR reports (ZDI-24-516, Nessus plugin 198215) co...