CVE-2024-4884

CVSS 3.1: 9.8 critical
EPSS: 24%p98
Published: Jun 25, 2024 · Jun 25, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-4884 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Apm.UI.Areas.APM.Controllers.CommunityController allows execution of commands with iisapppool\nmconsole privileges.

Vendors: progress

Products: whatsup gold

Weakness: CWE-77, CWE-78, CWE-94

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (24.3%)

In the news

1 story

Critical Security Flaw in WhatsUp Gold Under Active Attack

The Hacker NewsAug 31, 15:14 UTC · Aug 31, 2024Exploit / PoCExploitedCVE-2024-4885 CVE-2024-4883 CVE-2024-4884+12