# Progress Whatsup Gold


- [CVE-2024-6670](https://insights.sbomify.com/CVE-2024-6670/): Progress WhatsUp Gold SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2024-4885](https://insights.sbomify.com/CVE-2024-4885/): Progress WhatsUp Gold Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2024-46909](https://insights.sbomify.com/CVE-2024-46909/): WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2024-8785](https://insights.sbomify.com/CVE-2024-8785/): WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2024-7763](https://insights.sbomify.com/CVE-2024-7763/): WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2024-6671](https://insights.sbomify.com/CVE-2024-6671/): WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2024-4883](https://insights.sbomify.com/CVE-2024-4883/): WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2024-4884](https://insights.sbomify.com/CVE-2024-4884/): WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2018-8938](https://insights.sbomify.com/CVE-2018-8938/): Code injection in n/a (critical 9.8)
- [CVE-2018-8939](https://insights.sbomify.com/CVE-2018-8939/): Server-side request forgery in n/a (critical 9.8)
- [CVE-2018-5777](https://insights.sbomify.com/CVE-2018-5777/): Command injection in n/a (critical 9.8)
- [CVE-2018-5778](https://insights.sbomify.com/CVE-2018-5778/): SQL injection in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/progress/whatsup-gold/