Skip to content
COOEY

FAIL › dossier

WhatsUp Gold

PRODUCT

· dossier confidence 0%

Progress WhatsUp Gold is a network monitoring tool from Progress Software that has demonstrated severe security flaws, including critical SQL injection and high-severity path traversal vulnerabilities that have been actively exploited in the wild.

Failure events
2
Zero-days
0
RCEs
1
On KEV
2
Critical
1
Worst shame
78
PROFILE
CategoryNetwork MonitoringWhat they doProgress WhatsUp Gold is a network monitoring and management software product used for tracking device health, performance, and availability.
SECURITY POSTURE

Progress WhatsUp Gold has a poor security track record, with critical and high-severity vulnerabilities exploited in the wild, including unauthenticated SQL injection and path traversal leading to remote code execution.

Notable failures
  • CVE-2024-6670: Unauthenticated SQL injection allowing password theft
  • CVE-2024-4885: Path traversal enabling unauthenticated remote code execution
Patterns: unauthenticated remote code execution; SQL injection; path traversal
FAILURE HISTORY · 2
DATEEVENTSEVSUMMARY
2024-09-16 CVE-2024-6670 critical An unauthenticated SQL injection in Progress WhatsUp Gold lets attackers steal encrypted passwords when only one user is configured.
2025-03-03 CVE-2024-4885 high Progress WhatsUp Gold has a path traversal vulnerability allowing unauthenticated remote code execution, currently being exploited in the wild.
DOSSIER SOURCES
Open questions: Progress WhatsUp Gold's founding year and headquarters location
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-08-30 04:21:34.694218+00:00