CVE-2024-6670 Progress WhatsUp Gold
Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user.
- CVSS
- not scored
On CISA’s exploited list
Progress WhatsUp Gold SQL Injection Vulnerability
- Added
- 2024-09-16
- Federal patch deadline
- 2024-10-07
- Ransomware use
- known