CVEブラウザに戻る

CVE-2024-4885

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-06-25

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.

Affected Platforms (CPE)

📦

Progress

Whatsup Gold

< 23.1.3

References & Advisories

🔗 https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024

🔗 https://www.progress.com/network-monitoring

🔗 https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024

🔗 https://www.progress.com/network-monitoring

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-4885

関連する脆弱性情報

CVE-2026-120651.8

A vulnerability was identified in Groww Stock, Mutual Fund, Gold App up to 20260805 on Android. This affects an unknown part of th...

CVE-2025-394654.3

Missing Authorization vulnerability in flippercode Advanced Google Maps wp-google-map-gold allows Exploiting Incorrectly Configure...

CVE-2025-628995.9

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in THRIVE - Web Design Gold Coa...

CVE-2010-100158.4

AOL versions up to and including 9.5 includes an ActiveX control (Phobos.dll) that exposes a method called Import() via the Phobos...