CVE-2022-42711

—

CVSS 3.1

9.6 critical

EPSS

1%p63

Published

Oct 12, 2022 (Oct 12, 2022)

Modified

Jun 17, 2026

Description

In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.

Vendors: progress
Products: whatsup gold
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.