CVE-2015-6004

6.5 mediumEPSS 2.3%

Medium (6.5) in progress whatsup gold. EPSS 2.3% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via (1) the UniqueID (aka sUniqueID) parameter to WrFreeFormText.asp in the Reports component or (2) the Find Device parameter.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2015-12-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progress:whatsup_gold

References

http://twitter.com/ipswitch/statuses/677558623229317121
http://www.securityfocus.com/bid/79506
http://www.securitytracker.com/id/1034833
https://community.rapid7.com/community/infosec/blog/2015/12/16/multiple-disclosures-for-multiple-network-management-systems
https://www.kb.cert.org/vuls/id/176160

Check your stack JSON