← Database

CVE-2024-4884

CRITICAL CVSS: 9.8 Published: 2024-06-25 Modified: 2026-06-17

Description

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The Apm.UI.Areas.APM.Controllers.CommunityController allows execution of commands with iisapppool\nmconsole privileges.

Affected Platforms

Progress Whatsup Gold

Weakness Type

CWE-77, CWE-78, CWE-94, CWE-77

References