CVE-2024-5011 — Vulnetix

CVE-2024-5011 PUBLISHED CVSS 7.5 HIGH

In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenticated HTTP request to the TestController Chart functionality can lead to denial of service.

EPSS 10.67% · 93.5th percentile

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

10.67%

93.5th percentile

Affected Products

Vendor	Product	Versions
progress	whatsup_gold	0, 0, 0
progress	whatsup_gold	2023.1.0, 2023.1.0, 2023.1.0
Progress Software Corporation	WhatsUp Gold	2023.1.0, 2023.1.0, 2023.1.0

Exploit Intelligence

https://www.progress.com/network-monitoring (circl)
https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024 (circl)
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1934 (circl)

Timeline

Jun 25, 2024 CVE Published
Jun 26, 2024 EPSS Score
Jul 18, 2024 EPSS Score
Sep 1, 2024 EPSS Score
Sep 24, 2024 EPSS Score
Oct 5, 2024 Coalition ESS Score
Nov 8, 2024 EPSS Score
Nov 30, 2024 EPSS Score
Dec 24, 2024 EPSS Score
Feb 7, 2025 EPSS Score
Mar 1, 2025 EPSS Score
Mar 17, 2025 EPSS Score

References

https://www.progress.com/network-monitoring url
https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024 vendor-advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1934 url
https://nvd.nist.gov/vuln/detail/CVE-2024-5011 advisory

Open in Interactive Console →