CVE Vulnerability

CVE-2022-42711

In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.

9.6 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://www.progress.com/ Vendor Advisory
https://community.progress.com/s/article/Product-Alert-Bulletin-October-2022 Vendor Advisory
https://www.progress.com/network-monitoring Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*
Information

Published : 2022-10-12 01:15

Updated : 2022-10-13 02:26

NVD link : CVE-2022-42711

Mitre link : CVE-2022-42711

Products Affected
No products.
CWE
CWE-79