Exploited Vulnerabilities DailyCVE-2024-6670: Progress WhatsUp Gold
EPSS93.0%No. 414 of 1739 in KEV
CVE year2024listed the same year
Same vendor in KEV9
Same product2
| Field | Value |
|---|---|
| Vendor | Progress |
| Product | WhatsUp Gold |
| Name | Progress WhatsUp Gold SQL Injection Vulnerability |
| Added to KEV | 2024-09-16 |
| US federal due date | 2024-10-07 |
| Ransomware use | Known |
| CWE | CWE-89 |
CISA description
Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2024-4885 | Progress WhatsUp Gold | 2025-03-03 | 99.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Progress WhatsUp Gold vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-09-16.