Progress WhatsUp Gold SQL Injection Vulnerability

概要

参考情報

• community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024 · Vendor Advisory
• progress.com/network-monitoring · Product
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-6670

whatsup gold のその他の脆弱性

• CVE-2026-65941高 8.8In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execut…
• CVE-2026-65940中 6.8In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host …
• CVE-2026-65939中 6.8In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extensio…
• CVE-2026-65938中 4.3In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authentic…
• CVE-2026-65937高 8.0In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script conte…