CVE-2018-8939

9.8 criticalEPSS 1.4%

Critical (9.8) in progress whatsup gold. EPSS 1.4% chance of exploitation in the next 30 days.

An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted requests via the NmAPI executable to (1) gain unauthorized access to the WhatsUp Gold system, (2) obtain information about the WhatsUp Gold system, or (3) execute remote commands.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2018-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progress:whatsup_gold

References

https://docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm
https://docs.ipswitch.com/NM/WhatsUpGold2018/01_ReleaseNotes/index.htm

Check your stack JSON