VDB
CVE-2024-6672
CVE-2024-6672
PUBLISHED
CVSS 8.800000190734863 HIGH
In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an authenticated low-privileged attacker to achieve privilege escalation by modifying a privileged user's password.
EPSS 1.92% · 83.7th percentile
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.92%
83.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Progress Software Corporation | WhatsUp Gold | 2023.1.0 |
| progress | whatsupgold | 2023.1.0 |
| progress | whatsup_gold | 0 |
Timeline
- Aug 29, 2024 CVE Published
- Aug 30, 2024 EPSS Score
- Aug 30, 2024 CVE Updated
- Sep 19, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 30, 2024 EPSS Score
- Nov 19, 2024 EPSS Score
- Nov 22, 2024 Coalition ESS Score
- Dec 10, 2024 EPSS Score
- Jan 20, 2025 EPSS Score
- Feb 9, 2025 EPSS Score
- Mar 1, 2025 EPSS Score