← All advisories

Critical severity9.8CISA KEVNVD Advisory· Published Jun 25, 2024· Updated Jun 17, 2026

CVE-2024-4885

CVE-2024-4885

Description

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The

WhatsUp.ExportUtilities.Export.GetFileWithoutZip

allows execution of commands with iisapppool\nmconsole privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Progress (organisation)/Whatsup Gold3 versions
cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:progress:whatsup_gold:*:*:*:*:*:*:*:*range: <23.1.3
- (no CPE)range: <2023.1.3
- (no CPE)range: 2023.1.0

Patches

Vulnerability mechanics

References

3

community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024nvdVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
www.progress.com/network-monitoringnvdProduct

News mentions

1

INC Ransomware Uses Rust-Based Windows and Linux/ESXi Encryptors in New Attacks
Cyber Security News · Jun 19, 2026