CVE-2024-4884

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Apm.UI.Areas.APM.Controllers.CommunityController

allows execution of commands with iisapppool\nmconsole privileges.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77 CWE-78 CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Jun 25, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-488409.8Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08 CVE-2024-4884110.0Network access can be used to execute arbitrary code with elevated privileges. This issue affects FLXEON 9.3.4 and older.CVE-2024-488427.0Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions CVE-2024-488437.5Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Ente CVE-2024-488446.5Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Ente CVE-2024-488459.8Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unaut CVE-2024-488467.3Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings CVE-2024-488479.1MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 check CVE-2024-488486.5Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials becom CVE-2024-488499.4Missing Origin Validation in WebSockets vulnerability in FLXEON. Session management was not sufficient to prevent unauthorized HTTPS request CVE-2024-48859.8In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Wh CVE-2024-488507.2Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources. This issue affects ASPECT-Enterpri