CVE-2024-6670

9.8 criticalKEVEPSS 93%

Critical (9.8) in Progress WhatsUp Gold. In CISA KEV since 2024-09-16, with known ransomware use. EPSS 93% chance of exploitation in the next 30 days.

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 93% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2024-09-16, due 2024-10-07, known ransomware use
CWE: CWE-89
Published: 2024-08-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progress:whatsup_gold

References

https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024
https://www.progress.com/network-monitoring
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6670

Check your stack JSON