CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-08-29
Progress WhatsUp Gold Unauthenticated SQL Injection Vulnerability (CVE-2024-6670) Security Advisory
[Affected Scope] Progress WhatsUp Gold versions released before 2024.0.0
[Impact] An unauthenticated remote attacker can execute arbitrary SQL queries to retrieve sensitive database information, including encrypted user password hashes
[Mitigation] Immediately upgrade WhatsUp Gold to version 2024.0.0 or later and restrict database and web console access