CVE-2018-8939

CRITICAL 9.8CVE-2018-8939 · Published 01/05/2018 · updated 17/06/2026

In short

CVE-2018-8939 is a CRITICAL (CVSS 9.8) vulnerability affecting whatsup gold (progress).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.8% of all vulnerabilities.
Fix: update to 18.0 or later.

Package	Affected versions	Patched versions
whatsup gold progress	`< 18.0`	`18.0`

Description

An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted requests via the NmAPI executable to (1) gain unauthorized access to the WhatsUp Gold system, (2) obtain information about the WhatsUp Gold system, or (3) execute remote commands.

References

docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm · Release Notes

More vulnerabilities in whatsup gold

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

whatsup gold

progress

< 18.0

18.0

Description

More vulnerabilities in whatsup gold

See all →