{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-21T21:51:59.244","vulnerabilities":[{"cve":{"id":"CVE-2024-6671","sourceIdentifier":"security@progress.com","published":"2024-08-29T22:15:05.767","lastModified":"2026-06-17T08:18:27.407","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encrypted password."},{"lang":"es","value":"En las versiones de WhatsUp Gold lanzadas antes de 2024.0.0, si la aplicación está configurada con un solo usuario, una vulnerabilidad de inyección SQL permite que un atacante no autenticado recupere la contraseña cifrada del usuario."}],"affected":[{"source":"security@progress.com","affectedData":[{"vendor":"Progress Software Corporation","product":"WhatsUp Gold","defaultStatus":"affected","modules":["API Endpoint"],"platforms":["Windows"],"versions":[{"version":"2023.1.0","lessThan":"2024.0.0","versionType":"semver","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"progress","product":"whatsupgold","defaultStatus":"affected","cpes":["cpe:2.3:a:progress:whatsupgold:*:*:*:*:*:*:*:*"],"versions":[{"version":"2023.1.0","lessThan":"2024.0.0","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@progress.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-24T00:00:00+00:00","id":"CVE-2024-6671","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@progress.com","type":"Secondary","description":[{"lang":"en","value":"CWE-89"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*","versionStartIncluding":"23.1.0","versionEndExcluding":"24.0","matchCriteriaId":"3459EC7F-4718-4AFE-809C-AFCB6B660869"}]}]}],"references":[{"url":"https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024","source":"security@progress.com","tags":["Vendor Advisory"]},{"url":"https://www.progress.com/network-monitoring","source":"security@progress.com","tags":["Product"]}]}}]}