CVE-2022-29847

7.5 highEPSS 58%

High (7.5) in progress whatsup gold. EPSS 58% chance of exploitation in the next 30 days.

In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay encrypted WhatsUp Gold user credentials to an arbitrary host.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 58% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2022-05-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progress:whatsup_gold

References

https://community.progress.com/s/article/WhatsUp-Gold-Critical-Product-Alert-May-2022
https://www.progress.com/network-monitoring
https://community.progress.com/s/article/WhatsUp-Gold-Critical-Product-Alert-May-2022
https://www.progress.com/network-monitoring

Check your stack JSON