CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2024-4884
Critical (9.8) in progress whatsup gold. EPSS 24% chance of exploitation in the next 30 days.
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Apm.UI.Areas.APM.Controllers.CommunityController
allows execution of commands with iisapppool\nmconsole privileges.
Severity
- EPSS
- 24% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-77, CWE-78, CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- progress:whatsup_gold