← Database

CVE-2024-4885

CRITICAL CVSS: 9.8 Published: 2024-06-25 Modified: 2026-06-17

Description

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.

Affected Platforms

Progress Whatsup Gold

Weakness Type

CWE-22, NVD-CWE-noinfo

References