agentprime: progress-software-corporation-whatsup-goldEvery new CVE for progress-software-corporation-whatsup-gold.https://agentprime.io/CVE-2026-65941: WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.https://agentprime.io/advisories/CVE-2026-65941/https://agentprime.io/advisories/CVE-2026-65941/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:23:54 GMTCVECVE-2026-65940: WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.https://agentprime.io/advisories/CVE-2026-65940/https://agentprime.io/advisories/CVE-2026-65940/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:23:27 GMTCVECVE-2026-65939: WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.https://agentprime.io/advisories/CVE-2026-65939/https://agentprime.io/advisories/CVE-2026-65939/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:23:07 GMTCVECVE-2026-65938: WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.https://agentprime.io/advisories/CVE-2026-65938/https://agentprime.io/advisories/CVE-2026-65938/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:22:44 GMTCVECVE-2026-65937: WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UIhttps://agentprime.io/advisories/CVE-2026-65937/https://agentprime.io/advisories/CVE-2026-65937/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 15:21:55 GMTCVECVE-2025-2572: WhatsUp Gold NmConfigurationManager.exe database manipulation vulnerabilityhttps://agentprime.io/advisories/CVE-2025-2572/https://agentprime.io/advisories/CVE-2025-2572/CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Apr 2025 16:06:45 GMTCVECVE-2024-12105: WhatsUp Gold - SnmpExtendedActiveMonitor path traversalhttps://agentprime.io/advisories/CVE-2024-12105/https://agentprime.io/advisories/CVE-2024-12105/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Dec 2024 10:32:08 GMTCVECVE-2024-12106: WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authenticationhttps://agentprime.io/advisories/CVE-2024-12106/https://agentprime.io/advisories/CVE-2024-12106/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Dec 2024 10:32:02 GMTCVEcriticalCVE-2024-12108: WhatsUp Gold - Public API signing key rotation issuehttps://agentprime.io/advisories/CVE-2024-12108/https://agentprime.io/advisories/CVE-2024-12108/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Dec 2024 10:31:56 GMTCVEcriticalCVE-2024-8785: WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-8785/https://agentprime.io/advisories/CVE-2024-8785/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Dec 2024 14:49:36 GMTCVEcriticalCVE-2024-46909: WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-46909/https://agentprime.io/advisories/CVE-2024-46909/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.49 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Dec 2024 14:46:49 GMTCVEcriticalCVE-2024-46905: WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-46905/https://agentprime.io/advisories/CVE-2024-46905/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Dec 2024 14:45:13 GMTCVECVE-2024-46906: WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-46906/https://agentprime.io/advisories/CVE-2024-46906/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.40 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Dec 2024 14:44:08 GMTCVEcriticalCVE-2024-46907: WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-46907/https://agentprime.io/advisories/CVE-2024-46907/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Dec 2024 14:42:08 GMTCVECVE-2024-46908: WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-46908/https://agentprime.io/advisories/CVE-2024-46908/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Dec 2024 14:40:08 GMTCVECVE-2024-7763: WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-7763/https://agentprime.io/advisories/CVE-2024-7763/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Oct 2024 20:11:50 GMTCVEcriticalCVE-2024-6672: WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-6672/https://agentprime.io/advisories/CVE-2024-6672/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Aug 2024 22:07:13 GMTCVECVE-2024-6671: WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-6671/https://agentprime.io/advisories/CVE-2024-6671/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.19 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Aug 2024 22:06:19 GMTCVEcriticalCVE-2024-6670: WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-6670/https://agentprime.io/advisories/CVE-2024-6670/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 16 Sept 2024: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.93 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Aug 2024 22:04:41 GMTCVEcriticalKEVCVE-2024-5019: WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-5019/https://agentprime.io/advisories/CVE-2024-5019/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 20:29:00 GMTCVECVE-2024-5018: WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-5018/https://agentprime.io/advisories/CVE-2024-5018/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 20:27:11 GMTCVECVE-2024-5017: WhatsUp Gold AppProfileImport path traversal vulnerabilityhttps://agentprime.io/advisories/CVE-2024-5017/https://agentprime.io/advisories/CVE-2024-5017/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 20:25:37 GMTCVECVE-2024-5016: WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-5016/https://agentprime.io/advisories/CVE-2024-5016/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.22 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 20:23:46 GMTCVEcriticalCVE-2024-5015: WhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-5015/https://agentprime.io/advisories/CVE-2024-5015/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 20:15:07 GMTCVECVE-2024-5014: WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosurehttps://agentprime.io/advisories/CVE-2024-5014/https://agentprime.io/advisories/CVE-2024-5014/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 20:13:21 GMTCVECVE-2024-5013: WhatsUp Gold InstallController Denial-of-Service Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-5013/https://agentprime.io/advisories/CVE-2024-5013/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 20:11:58 GMTCVECVE-2024-5012: WhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-5012/https://agentprime.io/advisories/CVE-2024-5012/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 20:10:33 GMTCVECVE-2024-5011: WhatsUp Gold TestController Chart denial of service vulnerabilityhttps://agentprime.io/advisories/CVE-2024-5011/https://agentprime.io/advisories/CVE-2024-5011/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.47 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 20:01:47 GMTCVEcriticalCVE-2024-5010: WhatsUp Gold TestController multiple information disclosure vulnerabilitieshttps://agentprime.io/advisories/CVE-2024-5010/https://agentprime.io/advisories/CVE-2024-5010/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.70 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 20:00:07 GMTCVEcriticalCVE-2024-5009: WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-5009/https://agentprime.io/advisories/CVE-2024-5009/CVSS 8.4 (High). Critical: CVSS score 8.4 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 19:58:48 GMTCVEcriticalCVE-2024-5008: WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-5008/https://agentprime.io/advisories/CVE-2024-5008/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 19:57:16 GMTCVEcriticalCVE-2024-4885: WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-4885/https://agentprime.io/advisories/CVE-2024-4885/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Mar 2025: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.99 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 19:48:15 GMTCVEcriticalKEVCVE-2024-4884: WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-4884/https://agentprime.io/advisories/CVE-2024-4884/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.24 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 19:46:22 GMTCVEcriticalCVE-2024-4883: WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-4883/https://agentprime.io/advisories/CVE-2024-4883/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.65 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 19:44:42 GMTCVEcriticalCVE-2024-4562: WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettingshttps://agentprime.io/advisories/CVE-2024-4562/https://agentprime.io/advisories/CVE-2024-4562/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 20:36:46 GMTCVECVE-2024-4561: WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconControllerhttps://agentprime.io/advisories/CVE-2024-4561/https://agentprime.io/advisories/CVE-2024-4561/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 May 2024 20:35:17 GMTCVECVE-2023-6368: WhatsUp Gold Unauthenticated Access to an API Endpointhttps://agentprime.io/advisories/CVE-2023-6368/https://agentprime.io/advisories/CVE-2023-6368/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Dec 2023 16:06:29 GMTCVECVE-2023-6595: WhatsUp Gold Unauthenticated Access to an API Endpointhttps://agentprime.io/advisories/CVE-2023-6595/https://agentprime.io/advisories/CVE-2023-6595/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Dec 2023 16:06:11 GMTCVECVE-2023-6367: WhatsUp Gold Stored Cross-Site Scripting (XSS) via Roleshttps://agentprime.io/advisories/CVE-2023-6367/https://agentprime.io/advisories/CVE-2023-6367/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Dec 2023 16:05:50 GMTCVECVE-2023-6366: WhatsUp Gold Stored Cross-Site Scripting (XSS) via Alert Centerhttps://agentprime.io/advisories/CVE-2023-6366/https://agentprime.io/advisories/CVE-2023-6366/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Dec 2023 16:05:31 GMTCVECVE-2023-6365: WhatsUp Gold Stored Cross-Site Scripting (XSS) via Device Groupshttps://agentprime.io/advisories/CVE-2023-6365/https://agentprime.io/advisories/CVE-2023-6365/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Dec 2023 16:05:08 GMTCVECVE-2023-6364: WhatsUp Gold Stored Cross-Site Scripting (XSS) via Dashboardhttps://agentprime.io/advisories/CVE-2023-6364/https://agentprime.io/advisories/CVE-2023-6364/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Dec 2023 16:04:40 GMTCVE