Aug 29, 2024
1 new incident, 0 with updates.
Started
- ClosedPatched
Progress WhatsUp Gold SQL Injection
Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user. Added to the CISA KEV catalog on 2024-09-16. CISA lists known use in ransomware campaigns.
Progress WhatsUp GoldClosed Sep 16, 2024