CyberSec.Space Logo
Back to CVE Browser

CVE-2024-6670

🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2024-08-29
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

In WhatsUp Gold versions released before 2024.0.0, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password.

Affected Platforms (CPE)

📦
Progress

Whatsup Gold

< 24.0

References & Advisories

🔗 https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024
🔗 https://www.progress.com/network-monitoring
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-6670

Related Security Intelligence Articles

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

2026-07-27

Global Cyber Intel Digest: July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

2026-07-24

Global Cyber Intel Digest: July 22, 2026

Coverage of active exploitation targeting on-premise Microsoft SharePoint CVE-2026-50522, Qilin ransomware leveraging PAN-OS CVE-2026-0257 GlobalProtect authentication bypass, and critical security patch updates across enterprise networking hardware.

2026-07-22

Related Vulnerabilities

CVE-2026-120651.8

A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. This affects an unknown part of th...

CVE-2025-394654.3

Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configure...

CVE-2025-628995.9

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in THRIVE - Web Design Gold Coa...

CVE-2010-100158.4

AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos...